diff --git a/.github/workflows/published-canary.yml b/.github/workflows/published-canary.yml
index 1175882e..2cd375db 100644
--- a/.github/workflows/published-canary.yml
+++ b/.github/workflows/published-canary.yml
@@ -48,7 +48,7 @@ jobs:
       # uninstallable CLI precisely because the workspace symlink hid it.
       - uses: actions/checkout@v4
 
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v7
         with:
           node-version: '20'
 
diff --git a/action.yml b/action.yml
index 117a6a5e..13a20b52 100644
--- a/action.yml
+++ b/action.yml
@@ -119,7 +119,7 @@ runs:
     # ------------------------------------------------------------------
     - name: Setup Node.js ${{ inputs.node-version }}
       if: ${{ inputs.cli-command == '' }}
-      uses: actions/setup-node@v4
+      uses: actions/setup-node@v7
       with:
         node-version: ${{ inputs.node-version }}