diff --git a/.github/workflows/doc_sync.yml b/.github/workflows/doc_sync.yml
index 012c2bfb..7fc6fc08 100644
--- a/.github/workflows/doc_sync.yml
+++ b/.github/workflows/doc_sync.yml
@@ -27,7 +27,7 @@ jobs:
       - uses: actions/checkout@v5
 
       - name: Set up Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v7
         with:
           python-version: "3.12"
 
diff --git a/.github/workflows/drift_check.yml b/.github/workflows/drift_check.yml
index 5abfda1f..03558b53 100644
--- a/.github/workflows/drift_check.yml
+++ b/.github/workflows/drift_check.yml
@@ -20,7 +20,7 @@ jobs:
     steps:
       - uses: actions/checkout@v5
 
-      - uses: actions/setup-python@v5
+      - uses: actions/setup-python@v7
         with:
           python-version: '3.10'
 
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 597907b2..a0916c0e 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -27,7 +27,7 @@ jobs:
       - uses: actions/checkout@v5
         with:
           fetch-depth: 0   # need history to diff against the base
-      - uses: actions/setup-python@v5
+      - uses: actions/setup-python@v7
         with:
           python-version: "3.12"
       - name: Install ruff
diff --git a/.github/workflows/pages.yml b/.github/workflows/pages.yml
index 3644edd3..1a91fd53 100644
--- a/.github/workflows/pages.yml
+++ b/.github/workflows/pages.yml
@@ -26,7 +26,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v5
-      - uses: actions/setup-python@v5
+      - uses: actions/setup-python@v7
         with:
           python-version: "3.12"
       - name: Install MkDocs Material
diff --git a/.github/workflows/pip_audit.yml b/.github/workflows/pip_audit.yml
index 075766f2..69058d57 100644
--- a/.github/workflows/pip_audit.yml
+++ b/.github/workflows/pip_audit.yml
@@ -45,7 +45,7 @@ jobs:
       - uses: actions/checkout@v5
 
       - name: Set up Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v7
         with:
           python-version: "3.12"
 
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index c65793bf..f3ab510f 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -48,7 +48,7 @@ jobs:
         uses: actions/checkout@v5
 
       - name: Set up Python 3.12
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v7
         with:
           python-version: "3.12"
           cache: "pip"
@@ -81,7 +81,7 @@ jobs:
           fetch-depth: 0   # full history for SBOM provenance
 
       - name: Set up Python 3.12
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v7
         with:
           python-version: "3.12"
           cache: "pip"
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 8a923aff..e44879e3 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -35,7 +35,7 @@ jobs:
         uses: actions/checkout@v5
 
       - name: Set up Python ${{ matrix.python-version }}
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v7
         with:
           python-version: ${{ matrix.python-version }}
           cache: "pip"
@@ -282,7 +282,7 @@ jobs:
           --health-interval 5s --health-timeout 5s --health-retries 12
     steps:
       - uses: actions/checkout@v5
-      - uses: actions/setup-python@v5
+      - uses: actions/setup-python@v7
         with:
           python-version: "3.12"
           cache: "pip"
diff --git a/.github/workflows/upstream_audit_status.yml b/.github/workflows/upstream_audit_status.yml
index b9f89e84..09a97437 100644
--- a/.github/workflows/upstream_audit_status.yml
+++ b/.github/workflows/upstream_audit_status.yml
@@ -69,7 +69,7 @@ jobs:
       - uses: actions/checkout@v5
 
       - name: Set up Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v7
         with:
           python-version: "3.12"
 
diff --git a/.github/workflows/upstream_drift_watcher.yml b/.github/workflows/upstream_drift_watcher.yml
index 73498c83..cfa1eeac 100644
--- a/.github/workflows/upstream_drift_watcher.yml
+++ b/.github/workflows/upstream_drift_watcher.yml
@@ -49,7 +49,7 @@ jobs:
         uses: actions/checkout@v5
 
       - name: Set up Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v7
         with:
           python-version: "3.12"