diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 415fb799b..577d19735 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -47,7 +47,7 @@ jobs:
           - 5432:5432
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Setup Go ${{ matrix.go-version }}
         uses: actions/setup-go@v6
@@ -118,7 +118,7 @@ jobs:
           - 5432:5432
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Setup Go ${{ matrix.go-version }}
         uses: actions/setup-go@v6
@@ -157,7 +157,7 @@ jobs:
     timeout-minutes: 5
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Setup Go ${{ matrix.go-version }}
         uses: actions/setup-go@v6
@@ -246,7 +246,7 @@ jobs:
         shell: pwsh
 
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: export RIVER_CMD_DIR
         run: |
@@ -392,7 +392,7 @@ jobs:
           check-latest: true
 
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Lint
         uses: golangci/golangci-lint-action@v9
@@ -416,7 +416,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - uses: actions/setup-go@v6
         with:
@@ -450,7 +450,7 @@ jobs:
           check-latest: true
 
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Check all go/toolchain directives match
         run: CHECK=true make update-mod-go
diff --git a/.github/workflows/rust.yaml b/.github/workflows/rust.yaml
index 5d8325749..233968fe6 100644
--- a/.github/workflows/rust.yaml
+++ b/.github/workflows/rust.yaml
@@ -35,7 +35,7 @@ jobs:
     timeout-minutes: 20
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
       - uses: dtolnay/rust-toolchain@stable
@@ -93,7 +93,7 @@ jobs:
         rust-version: ["1.95", "1.96", "1.97"]
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: dtolnay/rust-toolchain@master
         id: rust
         with:
@@ -137,7 +137,7 @@ jobs:
           - 5432:5432
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: dtolnay/rust-toolchain@stable
         id: rust
       - name: Cache Rust dependencies and build artifacts