diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index f7c3935..07f55d1 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -23,7 +23,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Test
         run: bash src/main.sh test --check
@@ -32,7 +32,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Build
         run: bash src/main.sh build
@@ -46,7 +46,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Build
         run: bash src/main.sh build
@@ -69,7 +69,7 @@ jobs:
       contents: write
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Tag matches the bundle version
         run: '[[ "${GITHUB_REF_NAME}" == "$(bash src/main.sh --tag)" ]] || { echo "tag ${GITHUB_REF_NAME} ≠ $(bash src/main.sh --tag)"; exit 1; }'
diff --git a/.github/workflows/labeler.yml b/.github/workflows/labeler.yml
index be534d7..b3462e1 100644
--- a/.github/workflows/labeler.yml
+++ b/.github/workflows/labeler.yml
@@ -18,7 +18,7 @@ jobs:
     timeout-minutes: 5
 
     steps:
-      - uses: actions/labeler@v6
+      - uses: actions/labeler@v7
         with:
           configuration-path: .github/labeler.yml
           sync-labels: true
diff --git a/.github/workflows/labels.yml b/.github/workflows/labels.yml
index 838abcb..fa35ad8 100644
--- a/.github/workflows/labels.yml
+++ b/.github/workflows/labels.yml
@@ -32,8 +32,8 @@ jobs:
     timeout-minutes: 5
 
     steps:
-      - uses: actions/checkout@v6
-      - uses: crazy-max/ghaction-github-labeler@v5.3.0
+      - uses: actions/checkout@v7
+      - uses: crazy-max/ghaction-github-labeler@v6.0.0
         with:
           yaml-file: .github/labels.yml
           dry-run: ${{ github.event_name == 'pull_request' }}