diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index a30a19c..01d13c2 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -17,7 +17,7 @@ jobs:
     name: Quality checks (poe)
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6.0.3
+      - uses: actions/checkout@v7.0.1
       - uses: astral-sh/setup-uv@v7
         with:
           enable-cache: true
diff --git a/.github/workflows/export-chronos2.yml b/.github/workflows/export-chronos2.yml
index e8dcbbe..4c5b2ae 100644
--- a/.github/workflows/export-chronos2.yml
+++ b/.github/workflows/export-chronos2.yml
@@ -32,7 +32,7 @@ jobs:
       id-token: write # mint the GitHub OIDC token for the HF trusted-publishing exchange
       contents: read
     steps:
-      - uses: actions/checkout@v6.0.3
+      - uses: actions/checkout@v7.0.1
       - uses: astral-sh/setup-uv@v7
       - run: uv sync --frozen --extra chronos
       - name: Export + verify