diff --git a/.github/workflows/commitlint.yml b/.github/workflows/commitlint.yml
index b580711..4185ad3 100644
--- a/.github/workflows/commitlint.yml
+++ b/.github/workflows/commitlint.yml
@@ -35,7 +35,7 @@ jobs:
           fetch-depth: 0
           ref: ${{ github.event.pull_request.head.sha || github.sha }}
 
-      - uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6
+      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7
         with:
           node-version: "24"
 
diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml
index 1b4dbba..3df53cb 100644
--- a/.github/workflows/release-please.yml
+++ b/.github/workflows/release-please.yml
@@ -113,7 +113,7 @@ jobs:
           "Release PR validation failed"
           "$TARGET_URL"
 
-      - uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6
+      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7
         if: ${{ steps.release-pr.outputs.found == 'true' }}
         with:
           node-version: "24"