diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 6f242b8..497b868 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -27,7 +27,7 @@ jobs:
     timeout-minutes: 15   # a stuck runner fails fast instead of hanging ~6h
     steps:
       - uses: actions/checkout@v6
-      - uses: actions/setup-python@v6
+      - uses: actions/setup-python@v7
         with:
           python-version: '3.12'
       - name: Qt offscreen system libs
@@ -60,7 +60,7 @@ jobs:
     timeout-minutes: 10   # this step has hung on a stuck runner; fail fast + rerun
     steps:
       - uses: actions/checkout@v6
-      - uses: actions/setup-python@v6
+      - uses: actions/setup-python@v7
         with:
           python-version: '3.12'
       - name: Qt offscreen system libs
@@ -85,7 +85,7 @@ jobs:
     timeout-minutes: 15
     steps:
       - uses: actions/checkout@v6
-      - uses: actions/setup-python@v6
+      - uses: actions/setup-python@v7
         with:
           python-version: '3.12'
       - name: Install deps
@@ -109,7 +109,7 @@ jobs:
     continue-on-error: true
     steps:
       - uses: actions/checkout@v6
-      - uses: actions/setup-python@v6
+      - uses: actions/setup-python@v7
         with:
           python-version: '3.12'
       - name: pip-audit (runtime + build deps)
@@ -138,7 +138,7 @@ jobs:
             label: Windows-x64
     steps:
       - uses: actions/checkout@v6
-      - uses: actions/setup-python@v6
+      - uses: actions/setup-python@v7
         with:
           python-version: '3.12'
       - name: Install build dependencies