diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 6d7702f..3f32779 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -25,7 +25,7 @@ jobs:
       # upgrade itself to satisfy go.mod — a literal pin here that drifts below
       # that directive is a hard build failure, not a silent downgrade. Reading
       # the directive means the two cannot disagree.
-      - uses: actions/setup-go@v6
+      - uses: actions/setup-go@v7
         with:
           go-version-file: go.mod
 
@@ -40,7 +40,7 @@ jobs:
     steps:
       - uses: actions/checkout@v7
 
-      - uses: actions/setup-go@v6
+      - uses: actions/setup-go@v7
         with:
           go-version-file: go.mod
 
@@ -83,7 +83,7 @@ jobs:
     steps:
       - uses: actions/checkout@v7
 
-      - uses: actions/setup-go@v6
+      - uses: actions/setup-go@v7
         with:
           go-version-file: go.mod
 
@@ -124,7 +124,7 @@ jobs:
         with:
           fetch-depth: 0
 
-      - uses: actions/setup-go@v6
+      - uses: actions/setup-go@v7
         with:
           go-version-file: go.mod
 
diff --git a/.github/workflows/dev-release.yml b/.github/workflows/dev-release.yml
index 7dcc920..e566ea4 100644
--- a/.github/workflows/dev-release.yml
+++ b/.github/workflows/dev-release.yml
@@ -26,7 +26,7 @@ jobs:
           ref: main
 
       # Go version comes from go.mod's `go` directive; see ci.yml for why it lives there.
-      - uses: actions/setup-go@v6
+      - uses: actions/setup-go@v7
         with:
           go-version-file: go.mod
 
diff --git a/.github/workflows/release-stable.yml b/.github/workflows/release-stable.yml
index a118ffe..8556645 100644
--- a/.github/workflows/release-stable.yml
+++ b/.github/workflows/release-stable.yml
@@ -22,7 +22,7 @@ jobs:
           ref: main
 
       # Go version comes from go.mod's `go` directive; see ci.yml for why it lives there.
-      - uses: actions/setup-go@v6
+      - uses: actions/setup-go@v7
         with:
           go-version-file: go.mod