diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 1f70d06..15803d8 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -30,7 +30,7 @@ jobs:
     name: gate (${{ matrix.os }})
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Install PSScriptAnalyzer + Pester
         shell: pwsh
@@ -44,7 +44,7 @@ jobs:
 
       - name: Upload analyzer output (on failure)
         if: failure()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: psscriptanalyzer-${{ matrix.os }}
           path: |
diff --git a/.github/workflows/deploy-site.yml b/.github/workflows/deploy-site.yml
index cd99435..32a94fe 100644
--- a/.github/workflows/deploy-site.yml
+++ b/.github/workflows/deploy-site.yml
@@ -33,7 +33,7 @@ jobs:
       CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN }}
       CLOUDFLARE_ACCOUNT_ID: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       # Nothing compiles here, so the only thing worth proving before a
       # deploy is that the files the page asks for are actually present.