diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 8486a0d..3fd60a8 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -13,7 +13,7 @@ jobs:
   verify:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       # Use the SAME Node version production runs (Netlify reads .nvmrc too).
       # This is what makes the runtime canary meaningful.
diff --git a/.github/workflows/db-backup.yml b/.github/workflows/db-backup.yml
index 4fac411..f408385 100644
--- a/.github/workflows/db-backup.yml
+++ b/.github/workflows/db-backup.yml
@@ -10,7 +10,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Install PostgreSQL client
         run: sudo apt-get install -y postgresql-client