diff --git a/.github/workflows/_ci.yml b/.github/workflows/_ci.yml
index 83ba732..8ab1bc9 100644
--- a/.github/workflows/_ci.yml
+++ b/.github/workflows/_ci.yml
@@ -17,7 +17,7 @@ jobs:
     outputs:
       rust-version: ${{ steps.rust-version.outputs.RUST_VERSION }}
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
     - name: Get rust version from .tool-versions
       id: rust-version
       run: echo "RUST_VERSION=$(grep '^rust ' .tool-versions | awk '{print $2}')" >> $GITHUB_OUTPUT
@@ -25,7 +25,7 @@ jobs:
     needs: get-rust-version
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
     - uses: dtolnay/rust-toolchain@master
       with:
         toolchain: ${{ needs.get-rust-version.outputs.rust-version }}
@@ -40,7 +40,7 @@ jobs:
     needs: get-rust-version
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
     - uses: dtolnay/rust-toolchain@master
       with:
         toolchain: ${{ needs.get-rust-version.outputs.rust-version }}
@@ -74,27 +74,27 @@ jobs:
           binary_name: gitopolis
     runs-on: ${{ matrix.os }}
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
     - uses: dtolnay/rust-toolchain@master
       with:
         toolchain: ${{ needs.get-rust-version.outputs.rust-version }}
         targets: ${{ matrix.target }}
     - name: Cache Cargo registry
-      uses: actions/cache@v5
+      uses: actions/cache@v6
       with:
         path: ~/.cargo/registry/index
         key: ${{ runner.os }}-cargo-registry-${{ hashFiles('**/Cargo.lock') }}
         restore-keys: |
           ${{ runner.os }}-cargo-registry-
     - name: Cache Cargo dependencies
-      uses: actions/cache@v5
+      uses: actions/cache@v6
       with:
         path: ~/.cargo/registry/cache
         key: ${{ runner.os }}-cargo-deps-${{ hashFiles('**/Cargo.lock') }}
         restore-keys: |
           ${{ runner.os }}-cargo-deps-
     - name: Cache build artifacts
-      uses: actions/cache@v5
+      uses: actions/cache@v6
       with:
         path: target
         key: ${{ runner.os }}-${{ matrix.target }}-cargo-build-${{ hashFiles('**/Cargo.lock') }}-${{ hashFiles('**/*.rs') }}
diff --git a/.github/workflows/_release.yml b/.github/workflows/_release.yml
index 46e2459..fbb59c8 100644
--- a/.github/workflows/_release.yml
+++ b/.github/workflows/_release.yml
@@ -18,7 +18,7 @@ jobs:
   release:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
       with:
         fetch-depth: 0
 
diff --git a/.github/workflows/build-main.yml b/.github/workflows/build-main.yml
index 76fd2fc..29e67b8 100644
--- a/.github/workflows/build-main.yml
+++ b/.github/workflows/build-main.yml
@@ -19,7 +19,7 @@ jobs:
       should_release: ${{ steps.check_changes.outputs.should_release }}
       release_tag: ${{ steps.version_outputs.outputs.tag }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
@@ -83,7 +83,7 @@ jobs:
     if: needs.check-release.outputs.should_release == 'true'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           ref: ${{ github.sha }}
 
diff --git a/.github/workflows/update-nix-flake.yml b/.github/workflows/update-nix-flake.yml
index ef9a1db..fc37b8a 100644
--- a/.github/workflows/update-nix-flake.yml
+++ b/.github/workflows/update-nix-flake.yml
@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout nix branch
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           ref: nix