diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 9b3da64..936f956 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -200,7 +200,7 @@ jobs:
     timeout-minutes: 20
     steps:
       - uses: actions/checkout@v7
-      - uses: actions/setup-node@v6
+      - uses: actions/setup-node@v7
         with:
           node-version: "24"
       - uses: pnpm/action-setup@v6
@@ -229,7 +229,7 @@ jobs:
     timeout-minutes: 20
     steps:
       - uses: actions/checkout@v7
-      - uses: actions/setup-node@v6
+      - uses: actions/setup-node@v7
         with:
           node-version: "24"
       - uses: pnpm/action-setup@v6
@@ -267,7 +267,7 @@ jobs:
     timeout-minutes: 15
     steps:
       - uses: actions/checkout@v7
-      - uses: actions/setup-node@v6
+      - uses: actions/setup-node@v7
         with:
           node-version: "24"
       - uses: pnpm/action-setup@v6
diff --git a/.github/workflows/extended-validation.yml b/.github/workflows/extended-validation.yml
index dbcf0f1..c4f192f 100644
--- a/.github/workflows/extended-validation.yml
+++ b/.github/workflows/extended-validation.yml
@@ -47,7 +47,7 @@ jobs:
           ref: 35eb9a907bb53f9bcf771a1435b72f17a7c7ad0c
           path: .bootstrap-control-plane
 
-      - uses: actions/setup-node@v6
+      - uses: actions/setup-node@v7
         with:
           node-version: '24.14.1'
           cache: npm
diff --git a/.github/workflows/pr-fast-ci.yml b/.github/workflows/pr-fast-ci.yml
index 570be7a..0ddfba2 100644
--- a/.github/workflows/pr-fast-ci.yml
+++ b/.github/workflows/pr-fast-ci.yml
@@ -153,7 +153,7 @@ jobs:
           repository: ${{ github.event.pull_request.head.repo.full_name }}
           ref: ${{ github.event.pull_request.head.sha }}
 
-      - uses: actions/setup-node@v6
+      - uses: actions/setup-node@v7
         with:
           node-version: "24"
 
diff --git a/.github/workflows/release-image.yml b/.github/workflows/release-image.yml
index e8b463d..904464a 100644
--- a/.github/workflows/release-image.yml
+++ b/.github/workflows/release-image.yml
@@ -34,7 +34,7 @@ jobs:
     steps:
       - uses: actions/checkout@v7
 
-      - uses: actions/setup-node@v6
+      - uses: actions/setup-node@v7
         with:
           node-version: "24"
 
diff --git a/.github/workflows/rg-ci.yml b/.github/workflows/rg-ci.yml
index 308c184..156cffe 100644
--- a/.github/workflows/rg-ci.yml
+++ b/.github/workflows/rg-ci.yml
@@ -55,7 +55,7 @@ jobs:
     timeout-minutes: 20
     steps:
       - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
-      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
+      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7
         with:
           node-version: ${{ inputs.node-version }}
       - uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6
diff --git a/.github/workflows/runner-version-freshness.yml b/.github/workflows/runner-version-freshness.yml
index a7fc4d7..779c4e6 100644
--- a/.github/workflows/runner-version-freshness.yml
+++ b/.github/workflows/runner-version-freshness.yml
@@ -18,7 +18,7 @@ jobs:
     steps:
       - uses: actions/checkout@v7
 
-      - uses: actions/setup-node@v6
+      - uses: actions/setup-node@v7
         with:
           node-version: "24"
 
diff --git a/test/workflow.test.ts b/test/workflow.test.ts
index 35b9bec..75c9da2 100644
--- a/test/workflow.test.ts
+++ b/test/workflow.test.ts
@@ -149,7 +149,7 @@ describe("CI workflow", () => {
       Record<string, unknown>
     >;
     const forkSetupNodeStep = forkSteps.find(
-      (step) => step.uses === "actions/setup-node@v6"
+      (step) => step.uses === "actions/setup-node@v7"
     );
 
     expect(trustedJob["runs-on"]).toEqual(shellSafePublicRunner);