diff --git a/.forgejo/workflows/deploy.yaml b/.forgejo/workflows/deploy.yaml
index 28b4969..62aa741 100644
--- a/.forgejo/workflows/deploy.yaml
+++ b/.forgejo/workflows/deploy.yaml
@@ -32,7 +32,7 @@ jobs:
           nix-env -iA nixpkgs.nodejs_22
 
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Cache gems
         uses: actions/cache@v6
@@ -94,7 +94,7 @@ jobs:
           pacman -Syu --noconfirm nodejs openssh rsync
 
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Deploy docker-compose.yml
         uses: easingthemes/ssh-deploy@v6.0.3
diff --git a/.forgejo/workflows/test.yaml b/.forgejo/workflows/test.yaml
index 75170ba..41a766a 100644
--- a/.forgejo/workflows/test.yaml
+++ b/.forgejo/workflows/test.yaml
@@ -38,7 +38,7 @@ jobs:
           nix-env -iA nixpkgs.nodejs_22
 
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       # The nix closure persists in the runner's nix-store volume; gems live
       # in the workspace (.gems via the flake's BUNDLE_PATH), so cache those.