diff --git a/.github/workflows/update.yml b/.github/workflows/update.yml
index e752648..87f3e8e 100644
--- a/.github/workflows/update.yml
+++ b/.github/workflows/update.yml
@@ -14,7 +14,7 @@ jobs:
   update:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       # Mint a token from the GitHub App so the opened PR triggers CI; pushes
       # made with GITHUB_TOKEN do not. Same App as the org repo-sync workflows.