diff --git a/.github/workflows/pidgin-extensions.yml b/.github/workflows/pidgin-extensions.yml
index ee6961eb..25f48685 100644
--- a/.github/workflows/pidgin-extensions.yml
+++ b/.github/workflows/pidgin-extensions.yml
@@ -66,7 +66,7 @@ jobs:
       # interpreter on first `Python::with_gil`. Unlike V8 there is no blob to
       # download — the runner's system libpython is enough — so, unlike the deno
       # job, this engine builds and tests offline in every sandbox too.
-      - uses: actions/setup-python@v5
+      - uses: actions/setup-python@v7
         with:
           python-version: "3.12"
       - run: cargo build -p pidgin-extensions --features python
diff --git a/.github/workflows/python.yml b/.github/workflows/python.yml
index a36adf76..bf2fc1cc 100644
--- a/.github/workflows/python.yml
+++ b/.github/workflows/python.yml
@@ -48,7 +48,7 @@ jobs:
         with:
           submodules: recursive
 
-      - uses: actions/setup-python@v5
+      - uses: actions/setup-python@v7
         with:
           python-version: "3.12"