diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 9a5c33d..87dc01c 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -65,7 +65,7 @@ jobs:
 
       # Version comes from go.work so CI can never drift from the repo.
       - name: Setup Go
-        uses: actions/setup-go@v6
+        uses: actions/setup-go@v7
         with:
           go-version-file: go.work
           cache: true
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 056b084..9e7b78a 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -42,7 +42,7 @@ jobs:
       # autobuild for Go needs a toolchain matching the workspace.
       - name: Setup Go
         if: matrix.language == 'go'
-        uses: actions/setup-go@v6
+        uses: actions/setup-go@v7
         with:
           go-version-file: go.work
           cache: true
diff --git a/.github/workflows/pre-commit.yml b/.github/workflows/pre-commit.yml
index b1d89fe..780a157 100644
--- a/.github/workflows/pre-commit.yml
+++ b/.github/workflows/pre-commit.yml
@@ -27,7 +27,7 @@ jobs:
           fetch-depth: 0
 
       - name: Setup Go
-        uses: actions/setup-go@v6
+        uses: actions/setup-go@v7
         with:
           go-version-file: go.work
           cache: true