diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 7d7eed2..a628459 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -12,7 +12,7 @@ jobs:
     name: Analyze and test
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       # Single source of truth for the SDK: the version developers use locally
       # via FVM is the version CI runs on.
       - name: Read Flutter version from .fvmrc
@@ -41,7 +41,7 @@ jobs:
     name: pub.dev score
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - name: Read Flutter version from .fvmrc
         id: fvm
         run: echo "flutter=$(jq -r .flutter .fvmrc)" >> "$GITHUB_OUTPUT"
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index b715332..f601f4e 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -13,7 +13,7 @@ jobs:
     if: ${{ github.event.workflow_run.conclusion == 'success' }}
     steps:
       # Check out the exact commit that passed CI, not just master HEAD.
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           ref: ${{ github.event.workflow_run.head_sha }}
       # Single source of truth for the SDK: reuse the Flutter version from