diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml
index d68ac6f..f0ecf9b 100644
--- a/.github/workflows/release-please.yml
+++ b/.github/workflows/release-please.yml
@@ -68,7 +68,7 @@ jobs:
           ref: ${{ needs.release-please.outputs.sha }}
           persist-credentials: 'false'
       - name: Setup .npmrc file to publish to npm
-        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: '26.4.0'
           registry-url: 'https://registry.npmjs.org'
@@ -100,7 +100,7 @@ jobs:
           ref: ${{ inputs.branch }}
           persist-credentials: 'false'
       - name: Setup .npmrc file to publish to npm
-        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: '26.4.0'
           registry-url: 'https://registry.npmjs.org'
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 1686b79..d5b8c39 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -31,7 +31,7 @@ jobs:
         with:
           persist-credentials: 'false'
       - name: Set up Node.js
-        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: 26.x
           package-manager-cache: false
@@ -57,7 +57,7 @@ jobs:
         with:
           persist-credentials: 'false'
       - name: Set up Node.js
-        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: ${{ matrix.node }}
           package-manager-cache: false