diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index abcd4b4..236e522 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -14,7 +14,7 @@ jobs:
     name: JS / TS (sdk + embed + server + viewer)
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - uses: pnpm/action-setup@v6
       - uses: actions/setup-node@v4
         with:
@@ -38,7 +38,7 @@ jobs:
       matrix:
         python: ["3.10", "3.11", "3.12", "3.13"]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - uses: actions/setup-python@v6
         with:
           python-version: ${{ matrix.python }}
@@ -59,7 +59,7 @@ jobs:
     name: Go (cv-go + cv CLI + middleware)
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - uses: actions/setup-go@v6
         with:
           go-version: "1.26"
@@ -79,7 +79,7 @@ jobs:
           - integrations/llama-index-readers-cvfile
           - integrations/cvfile-haystack
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - uses: actions/setup-python@v6
         with:
           python-version: "3.12"
@@ -102,7 +102,7 @@ jobs:
     name: cv-detector (Go + TS + Python)
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - uses: actions/setup-go@v6
         with:
           go-version: "1.26"
@@ -138,7 +138,7 @@ jobs:
     name: PDF/A-3u conformance gate (veraPDF)
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - uses: pnpm/action-setup@v6
       - uses: actions/setup-node@v4
         with:
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index be22d4a..a38d8b5 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -38,7 +38,7 @@ jobs:
           - language: go
             build-mode: autobuild
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - uses: actions/setup-go@v6
         if: matrix.language == 'go'
         with:
diff --git a/.github/workflows/deploy-docs.yml b/.github/workflows/deploy-docs.yml
index 24875cd..94a3533 100644
--- a/.github/workflows/deploy-docs.yml
+++ b/.github/workflows/deploy-docs.yml
@@ -28,7 +28,7 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - uses: pnpm/action-setup@v6
       - uses: actions/setup-node@v4
         with:
diff --git a/.github/workflows/publish-cvfile-cv-detector-npm.yml b/.github/workflows/publish-cvfile-cv-detector-npm.yml
index 4d2681f..2aa4942 100644
--- a/.github/workflows/publish-cvfile-cv-detector-npm.yml
+++ b/.github/workflows/publish-cvfile-cv-detector-npm.yml
@@ -13,7 +13,7 @@ jobs:
   publish:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - uses: pnpm/action-setup@v6
       - uses: actions/setup-node@v4
         with:
diff --git a/.github/workflows/publish-cvfile-cv-detector-pypi.yml b/.github/workflows/publish-cvfile-cv-detector-pypi.yml
index 34ce584..24bd6ac 100644
--- a/.github/workflows/publish-cvfile-cv-detector-pypi.yml
+++ b/.github/workflows/publish-cvfile-cv-detector-pypi.yml
@@ -14,7 +14,7 @@ jobs:
   publish:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - uses: actions/setup-python@v6
         with:
           python-version: "3.12"
diff --git a/.github/workflows/publish-cvfile-haystack.yml b/.github/workflows/publish-cvfile-haystack.yml
index 731cea9..6b22ea2 100644
--- a/.github/workflows/publish-cvfile-haystack.yml
+++ b/.github/workflows/publish-cvfile-haystack.yml
@@ -22,7 +22,7 @@ jobs:
   publish:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           ref: ${{ inputs.tag || github.ref }}
       - uses: actions/setup-python@v6
diff --git a/.github/workflows/publish-langchain-cvfile.yml b/.github/workflows/publish-langchain-cvfile.yml
index d2cef92..5ef61ab 100644
--- a/.github/workflows/publish-langchain-cvfile.yml
+++ b/.github/workflows/publish-langchain-cvfile.yml
@@ -22,7 +22,7 @@ jobs:
   publish:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           ref: ${{ inputs.tag || github.ref }}
       - uses: actions/setup-python@v6
diff --git a/.github/workflows/publish-llama-index-readers-cvfile.yml b/.github/workflows/publish-llama-index-readers-cvfile.yml
index 83289aa..e0ce6dd 100644
--- a/.github/workflows/publish-llama-index-readers-cvfile.yml
+++ b/.github/workflows/publish-llama-index-readers-cvfile.yml
@@ -20,7 +20,7 @@ jobs:
   publish:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           ref: ${{ inputs.tag || github.ref }}
       - uses: actions/setup-python@v6
diff --git a/.github/workflows/publish-npm.yml b/.github/workflows/publish-npm.yml
index 83192eb..d2275d8 100644
--- a/.github/workflows/publish-npm.yml
+++ b/.github/workflows/publish-npm.yml
@@ -25,7 +25,7 @@ jobs:
   publish:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           ref: ${{ inputs.tag || github.ref }}
       - uses: pnpm/action-setup@v6
diff --git a/.github/workflows/publish-pypi.yml b/.github/workflows/publish-pypi.yml
index 8f523ab..af8aedf 100644
--- a/.github/workflows/publish-pypi.yml
+++ b/.github/workflows/publish-pypi.yml
@@ -14,7 +14,7 @@ jobs:
   publish:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - uses: actions/setup-python@v6
         with:
           python-version: "3.12"
diff --git a/.github/workflows/release-cv-cli.yml b/.github/workflows/release-cv-cli.yml
index a1014c4..8e36d68 100644
--- a/.github/workflows/release-cv-cli.yml
+++ b/.github/workflows/release-cv-cli.yml
@@ -19,7 +19,7 @@ jobs:
   goreleaser:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
           ref: ${{ inputs.tag || github.ref }}