diff --git a/.github/workflows/bootstrap-template.yaml b/.github/workflows/bootstrap-template.yaml
index e647ab7..13a0f8e 100644
--- a/.github/workflows/bootstrap-template.yaml
+++ b/.github/workflows/bootstrap-template.yaml
@@ -13,7 +13,7 @@ jobs:
     if: github.event.repository.is_template == false && github.actor != 'github-actions[bot]' && (github.event_name != 'create' || github.event.ref_type == 'branch')
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
       with:
         fetch-depth: 0
         ref: ${{ github.event.repository.default_branch }}
diff --git a/.github/workflows/coverage.yaml b/.github/workflows/coverage.yaml
index 29fa031..c03cea8 100644
--- a/.github/workflows/coverage.yaml
+++ b/.github/workflows/coverage.yaml
@@ -24,7 +24,7 @@ jobs:
     timeout-minutes: 15
     if: github.actor != 'github-actions[bot]'
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
       with:
         fetch-depth: 0
     - uses: ./.github/actions/setup-python-uv
diff --git a/.github/workflows/docker.yaml b/.github/workflows/docker.yaml
index 2b39118..674f30b 100644
--- a/.github/workflows/docker.yaml
+++ b/.github/workflows/docker.yaml
@@ -23,7 +23,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 20
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
     - name: Build Docker image
       run: docker build --pull -t python-template:ci .
     - name: Smoke-test Docker image
diff --git a/.github/workflows/documentation.yaml b/.github/workflows/documentation.yaml
index 262955b..d31b2a3 100644
--- a/.github/workflows/documentation.yaml
+++ b/.github/workflows/documentation.yaml
@@ -26,14 +26,14 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 15
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
     - uses: ./.github/actions/setup-python-uv
       with:
         python-version: ${{ env.PYTHON_VERSION }}
     - name: Build documentation
       run: uv run --locked --extra dev --extra docs tox run -e docs
     - name: Upload documentation artifact
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@v7
       with:
         name: documentation-html
         path: docs/_build/html
diff --git a/.github/workflows/package.yaml b/.github/workflows/package.yaml
index 45d6fa3..a12fad9 100644
--- a/.github/workflows/package.yaml
+++ b/.github/workflows/package.yaml
@@ -26,14 +26,14 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 15
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
     - uses: ./.github/actions/setup-python-uv
       with:
         python-version: ${{ env.PYTHON_VERSION }}
     - name: Build and verify package artifacts
       run: uv run --locked --extra dev tox run -e build
     - name: Upload package artifacts
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@v7
       with:
         name: package-dist
         path: dist
diff --git a/.github/workflows/quality.yaml b/.github/workflows/quality.yaml
index f28b3d8..df9487c 100644
--- a/.github/workflows/quality.yaml
+++ b/.github/workflows/quality.yaml
@@ -26,7 +26,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 10
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
     - uses: ./.github/actions/setup-python-uv
       with:
         python-version: ${{ env.PYTHON_VERSION }}
@@ -38,7 +38,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 10
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
     - uses: ./.github/actions/setup-python-uv
       with:
         python-version: ${{ env.PYTHON_VERSION }}
diff --git a/.github/workflows/security.yaml b/.github/workflows/security.yaml
index 41a2897..c1db110 100644
--- a/.github/workflows/security.yaml
+++ b/.github/workflows/security.yaml
@@ -26,7 +26,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 15
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
     - uses: ./.github/actions/setup-python-uv
       with:
         python-version: ${{ env.PYTHON_VERSION }}
diff --git a/.github/workflows/template-smoke.yaml b/.github/workflows/template-smoke.yaml
index 853db85..59bd33d 100644
--- a/.github/workflows/template-smoke.yaml
+++ b/.github/workflows/template-smoke.yaml
@@ -26,7 +26,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 30
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
     - uses: ./.github/actions/setup-python-uv
       with:
         python-version: ${{ env.PYTHON_VERSION }}
diff --git a/.github/workflows/tests.yaml b/.github/workflows/tests.yaml
index 9c5bdda..10117cf 100644
--- a/.github/workflows/tests.yaml
+++ b/.github/workflows/tests.yaml
@@ -40,7 +40,7 @@ jobs:
         - python-version: '3.14'
           tox-env: py314
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
     - uses: ./.github/actions/setup-python-uv
       with:
         python-version: ${{ matrix.python-version }}
@@ -52,14 +52,14 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 15
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
     - uses: ./.github/actions/setup-python-uv
       with:
         python-version: ${{ env.PYTHON_VERSION }}
     - name: Run coverage threshold
       run: uv run --locked --extra dev tox run -e coverage
     - name: Upload coverage report
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@v7
       with:
         name: coverage-xml
         path: coverage.xml