diff --git a/.github/workflows/framework-tests.yml b/.github/workflows/framework-tests.yml
index 7eb3465c..5db1f6cf 100644
--- a/.github/workflows/framework-tests.yml
+++ b/.github/workflows/framework-tests.yml
@@ -62,7 +62,7 @@ jobs:
     timeout-minutes: 15
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-      - uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6.3.0
+      - uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0
         with:
           go-version: 'stable'
           cache: false
diff --git a/.github/workflows/links.yml b/.github/workflows/links.yml
index 0a3cadb3..3c0976c8 100644
--- a/.github/workflows/links.yml
+++ b/.github/workflows/links.yml
@@ -82,7 +82,7 @@ jobs:
           # GITHUB_TOKEN can clone it — no dedicated secret needed.
           token: ${{ secrets.GITHUB_TOKEN }}
 
-      - uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6.3.0
+      - uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0
         with:
           go-version: 'stable'
           cache: false
diff --git a/.github/workflows/preview.yaml b/.github/workflows/preview.yaml
index 1776d1d0..e389c8da 100644
--- a/.github/workflows/preview.yaml
+++ b/.github/workflows/preview.yaml
@@ -31,7 +31,7 @@ jobs:
           node-version: 22.x
 
       - name: Setup Go
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@v7
         with:
           go-version: '1.24'
 
diff --git a/.github/workflows/production.yaml b/.github/workflows/production.yaml
index f63e72f2..7b9579cd 100644
--- a/.github/workflows/production.yaml
+++ b/.github/workflows/production.yaml
@@ -26,7 +26,7 @@ jobs:
           node-version: 22.x
 
       - name: Setup Go
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@v7
         with:
           go-version: '1.24'
 
diff --git a/.github/workflows/update-ref-docs.yaml b/.github/workflows/update-ref-docs.yaml
index 1e6aafd6..dfde2319 100644
--- a/.github/workflows/update-ref-docs.yaml
+++ b/.github/workflows/update-ref-docs.yaml
@@ -236,7 +236,7 @@ jobs:
           path: website
 
       - name: Setup Go
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@v7
         with:
           go-version: 'stable'
           cache: false