diff --git a/.github/workflows/catalog.yml b/.github/workflows/catalog.yml
index c7aece6..2d8099c 100644
--- a/.github/workflows/catalog.yml
+++ b/.github/workflows/catalog.yml
@@ -30,7 +30,7 @@ jobs:
         with:
           go-version: "1.26"
 
-      - uses: actions/setup-python@v5
+      - uses: actions/setup-python@v6
         with:
           python-version: "3.x"
 
diff --git a/.github/workflows/self-scan.yml b/.github/workflows/self-scan.yml
index b343162..6448676 100644
--- a/.github/workflows/self-scan.yml
+++ b/.github/workflows/self-scan.yml
@@ -97,7 +97,7 @@ jobs:
       - uses: actions/checkout@v6
         with:
           fetch-depth: 0 # tags, so `git describe` resolves the release version
-      - uses: actions/setup-go@v5
+      - uses: actions/setup-go@v6
         with:
           go-version: "1.26"
       - name: Build bumper from source