diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index a9f5657..b4b2082 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -19,7 +19,7 @@ jobs:
         uses: actions/checkout@v5
 
       - name: Set up Go
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@v7
         with:
           go-version-file: go.mod
           cache: true
@@ -53,7 +53,7 @@ jobs:
         uses: actions/checkout@v5
 
       - name: Set up Go
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@v7
         with:
           go-version-file: go.mod
           cache: true
@@ -157,7 +157,7 @@ jobs:
       - name: Check out code
         uses: actions/checkout@v5
       - name: Set up Go
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@v7
         with:
           go-version-file: go.mod
           cache: true
diff --git a/.github/workflows/dead-code.yml b/.github/workflows/dead-code.yml
index 63707e0..abe584c 100644
--- a/.github/workflows/dead-code.yml
+++ b/.github/workflows/dead-code.yml
@@ -12,7 +12,7 @@ jobs:
         with:
           fetch-depth: 0
       - uses: astral-sh/setup-uv@v7
-      - uses: actions/setup-go@v5
+      - uses: actions/setup-go@v7
         with:
           go-version-file: go.mod
       - run: bash scripts/check-dead-code.sh
diff --git a/.github/workflows/product-validation.yml b/.github/workflows/product-validation.yml
index 7e97652..f38a6c0 100644
--- a/.github/workflows/product-validation.yml
+++ b/.github/workflows/product-validation.yml
@@ -25,7 +25,7 @@ jobs:
           persist-credentials: false
       - uses: actions/setup-node@v4
         with: {node-version: 22}
-      - uses: actions/setup-go@v5
+      - uses: actions/setup-go@v7
         with: {go-version-file: go.mod, cache: true}
       - name: Validate exact candidate
         run: |