diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index d738ec8..4d72a8a 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -21,7 +21,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5.1.0
-      - uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
+      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: 22
       # the builder's own dev deps (jest for the script tests, eslint)
diff --git a/.github/workflows/update_cap.yml b/.github/workflows/update_cap.yml
index ab5733f..1a4d605 100644
--- a/.github/workflows/update_cap.yml
+++ b/.github/workflows/update_cap.yml
@@ -39,7 +39,7 @@ jobs:
       - uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5.1.0
         with:
           ref: main
-      - uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
+      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: 22
       # the builder's own dev deps (jest for the script tests, run by `npm test`)