diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index c38fee7..ca759c7 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -23,7 +23,7 @@ jobs:
           - pinned # reads .node-version
           - 24
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Resolve Node version
         id: node
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 1c68c5a..005759c 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -20,7 +20,7 @@ jobs:
       matrix:
         language: [javascript-typescript, actions]
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: github/codeql-action/init@v4
         with:
           languages: ${{ matrix.language }}
diff --git a/.github/workflows/e2e.yml b/.github/workflows/e2e.yml
index d091181..8c88273 100644
--- a/.github/workflows/e2e.yml
+++ b/.github/workflows/e2e.yml
@@ -55,7 +55,7 @@ jobs:
             archive: zip
             ext: zip
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Run pkg-action
         id: build
@@ -99,7 +99,7 @@ jobs:
     name: Verify action.yml codegen drift
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: actions/setup-node@v6
         with:
           node-version-file: .node-version
@@ -127,7 +127,7 @@ jobs:
     outputs:
       matrix: ${{ steps.plan.outputs.matrix }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - name: Expand targets into a matrix
         id: plan
         uses: ./matrix
@@ -149,7 +149,7 @@ jobs:
       matrix:
         entry: ${{ fromJson(needs.matrix-plan.outputs.matrix) }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Build fixture for ${{ matrix.entry.target }}
         id: build
@@ -178,7 +178,7 @@ jobs:
     name: multi-target / ubuntu-latest
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Build two linux targets in one invocation
         id: build
@@ -221,7 +221,7 @@ jobs:
     name: windows-metadata / windows-latest
     runs-on: windows-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: actions/setup-node@v6
         with:
           node-version-file: .node-version
@@ -282,7 +282,7 @@ jobs:
           - os: windows-latest
             target: node22-win-x64
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - uses: actions/setup-node@v6
         with:
diff --git a/action.yml b/action.yml
index e133786..a2eada3 100644
--- a/action.yml
+++ b/action.yml
@@ -139,7 +139,7 @@ runs:
 
     - name: Cache pkg-fetch Node downloads
       if: ${{ inputs.cache != 'false' }}
-      uses: actions/cache@v5
+      uses: actions/cache@v6
       with:
         path: ${{ runner.temp }}/pkg-cache
         key: ${{ inputs.cache-key || format('pkg-fetch-{0}-{1}-{2}', runner.os, runner.arch, hashFiles('**/package.json', '.pkgrc*', '**/pkg.config.{js,ts,json}')) }}