diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index b421fb3..ac478b4 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -88,7 +88,7 @@ jobs:
           fetch-depth: 1
       - run: mv _api_ci ../api
 
-      - uses: actions/setup-go@v6
+      - uses: actions/setup-go@v7
         with:
           go-version: '1.25'
 
@@ -195,7 +195,7 @@ jobs:
           fetch-depth: 1
       - run: mv _api_ci ../api
 
-      - uses: actions/setup-go@v6
+      - uses: actions/setup-go@v7
         with:
           go-version: '1.25'
 
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 8c85395..d3fff72 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -33,7 +33,7 @@ jobs:
         with:
           repository: InstaNode-dev/proto
           path: proto
-      - uses: actions/setup-go@v6
+      - uses: actions/setup-go@v7
         with:
           go-version-file: worker/go.mod
       - uses: github/codeql-action/init@v4
diff --git a/.github/workflows/coverage.yml b/.github/workflows/coverage.yml
index 1c467a4..a841fd8 100644
--- a/.github/workflows/coverage.yml
+++ b/.github/workflows/coverage.yml
@@ -105,7 +105,7 @@ jobs:
           fetch-depth: 1
       - run: mv _api_ci ../api
 
-      - uses: actions/setup-go@v6
+      - uses: actions/setup-go@v7
         with:
           go-version-file: worker/go.mod
 
@@ -166,7 +166,7 @@ jobs:
       # "Generate coverage" step is `|| true` so it still produces
       # coverage.out even on a flaky test — the gate reads that file.
       # ------------------------------------------------------------------
-      - uses: actions/setup-python@v6
+      - uses: actions/setup-python@v7
         if: github.event_name == 'pull_request'
         with:
           python-version: '3.12'
diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index 8844550..52b1eff 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -124,7 +124,7 @@ jobs:
           fetch-depth: 1
       - run: mv _api_ci ../api
 
-      - uses: actions/setup-go@v6
+      - uses: actions/setup-go@v7
         with:
           go-version: '1.25'
 
@@ -207,7 +207,7 @@ jobs:
           echo "Built ${VERSION} (${BUILD_TIME})"
 
       - name: Set up Go (for unit tests + go.mod replace directives)
-        uses: actions/setup-go@v6
+        uses: actions/setup-go@v7
         with:
           go-version: '1.25'
 
diff --git a/.github/workflows/golangci-lint.yml b/.github/workflows/golangci-lint.yml
index e1f99e2..90674cf 100644
--- a/.github/workflows/golangci-lint.yml
+++ b/.github/workflows/golangci-lint.yml
@@ -34,7 +34,7 @@ jobs:
           repository: InstaNode-dev/proto
           path: proto
         continue-on-error: true
-      - uses: actions/setup-go@v6
+      - uses: actions/setup-go@v7
         with:
           go-version-file: worker/go.mod
       - uses: golangci/golangci-lint-action@v9
diff --git a/.github/workflows/govulncheck.yml b/.github/workflows/govulncheck.yml
index 8286336..96a292d 100644
--- a/.github/workflows/govulncheck.yml
+++ b/.github/workflows/govulncheck.yml
@@ -30,7 +30,7 @@ jobs:
         with:
           repository: InstaNode-dev/proto
           path: proto
-      - uses: actions/setup-go@v6
+      - uses: actions/setup-go@v7
         with:
           go-version-file: worker/go.mod
           check-latest: true