diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index cbedfaa6d..43ef22322 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -57,7 +57,7 @@ jobs:
       - uses: actions/checkout@v6
         with:
           persist-credentials: false
-      - uses: actions/setup-node@v6
+      - uses: actions/setup-node@v7
         with:
           node-version: ${{ matrix.node-version }}
       # Lockfiles are gitignored, so `npm ci` (which strictly re-validates a
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 000033998..9c6ab9585 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -30,7 +30,7 @@ jobs:
           # only needs to live in memory for this checkout.
           persist-credentials: false
 
-      - uses: actions/setup-node@v6
+      - uses: actions/setup-node@v7
         with:
           node-version: 22
           registry-url: https://registry.npmjs.org