diff --git a/.github/workflows/internal-preview-build.yml b/.github/workflows/internal-preview-build.yml
index bba2452..8b3411a 100644
--- a/.github/workflows/internal-preview-build.yml
+++ b/.github/workflows/internal-preview-build.yml
@@ -16,7 +16,7 @@ jobs:
         with:
           persist-credentials: false
       - name: Configure build Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v7
         with:
           python-version: "3.14"
       - name: Install pinned app + build dependencies
diff --git a/.github/workflows/security-quality.yml b/.github/workflows/security-quality.yml
index 121cf19..2446639 100644
--- a/.github/workflows/security-quality.yml
+++ b/.github/workflows/security-quality.yml
@@ -18,7 +18,7 @@ jobs:
         with:
           persist-credentials: false
       - name: Python for analysis (not a user-install requirement)
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v7
         with:
           python-version: "3.14"
       - name: Prepare disposable QA runtime
diff --git a/.github/workflows/windows-quality.yml b/.github/workflows/windows-quality.yml
index 778fb9f..44067a9 100644
--- a/.github/workflows/windows-quality.yml
+++ b/.github/workflows/windows-quality.yml
@@ -26,7 +26,7 @@ jobs:
       PYTHONNOUSERSITE: "1"
     steps:
       - uses: actions/checkout@v4
-      - uses: actions/setup-python@v5
+      - uses: actions/setup-python@v7
         with:
           python-version: "3.14"
           cache: pip