diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 40c3701..6741e71 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -11,7 +11,7 @@ jobs:
     name: Unit tests
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: actions/setup-node@v6
         with:
           node-version: 20
@@ -30,7 +30,7 @@ jobs:
     name: "Zero-config defaults (should pass)"
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Create LLM config fixtures
         run: |
@@ -66,7 +66,7 @@ jobs:
     name: "Zero-config defaults over limit (should fail)"
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Create LLM config fixtures
         run: |
@@ -92,7 +92,7 @@ jobs:
     name: "Custom patterns override defaults (should pass)"
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - uses: ./
         id: check
@@ -114,7 +114,7 @@ jobs:
     name: "Total mode over limit (should fail)"
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - uses: ./
         id: check
@@ -136,7 +136,7 @@ jobs:
     name: "Per-file mode all under limit (should pass)"
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - uses: ./
         id: check
@@ -161,7 +161,7 @@ jobs:
     name: "Per-file mode over limit (should fail)"
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - uses: ./
         id: check
@@ -188,7 +188,7 @@ jobs:
     name: "Negation patterns exclude files (should pass)"
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Create fixtures
         run: |
@@ -216,7 +216,7 @@ jobs:
     name: "Alternate encoding o200k_base (should pass)"
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - uses: ./
         id: check
@@ -239,7 +239,7 @@ jobs:
     name: "All outputs populated correctly"
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - uses: ./
         id: check