diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 00e3778..aff5268 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       # Seed a dummy secrets.yaml so `esphome config` resolves !secret
       # references during the lint. Real secrets live in the maintainer's
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index fb94309..2171f2b 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout (full history for changelog)
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0