diff --git a/.github/workflows/codegen.yml b/.github/workflows/codegen.yml
index 49043363a7..68097f4790 100644
--- a/.github/workflows/codegen.yml
+++ b/.github/workflows/codegen.yml
@@ -59,7 +59,7 @@ jobs:
           fetch-depth: 1
           path: discovery-artifact-manager
           persist-credentials: false
-      - uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6
+      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7
         with:
           python-version: "3.14"
       - id: find-preferred-versions
@@ -111,7 +111,7 @@ jobs:
           fetch-depth: 1
           path: discovery-artifact-manager
           persist-credentials: false
-      - uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6
+      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7
         with:
           python-version: "3.14"
       - id: find-preferred-versions
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index a080362026..cb4b6721a9 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -43,7 +43,7 @@ jobs:
               with:
                 persist-credentials: false
             - name: Set up Python
-              uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6
+              uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7
               with:
                 python-version: "3.14"
             - name: Install dependencies