diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 02c12b3f..a935f16d 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -221,7 +221,7 @@ jobs:
       # RFC-0111 Phase 2: Python SDK (mycelium-rcig). Unit tests are hermetic
       # (injected spawn, stdlib unittest — no pip install); the integration run
       # round-trips real JSON through the SDK using the release binary above.
-      - uses: actions/setup-python@v6
+      - uses: actions/setup-python@v7
         with:
           python-version: '3.12'
       - name: Python SDK unit tests
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 8c09ab88..fa3ee5c6 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -255,7 +255,7 @@ jobs:
       VERSION: ${{ needs.validate.outputs.version }}
     steps:
       - uses: actions/checkout@v6
-      - uses: actions/setup-python@v6
+      - uses: actions/setup-python@v7
         with:
           python-version: '3.12'
       # RFC-0111 Phase 2: the Python SDK (mycelium-rcig) is a pure-Python thin