diff --git a/.github/workflows/Publish.yml b/.github/workflows/Publish.yml
index 2d8b9391..e234a974 100644
--- a/.github/workflows/Publish.yml
+++ b/.github/workflows/Publish.yml
@@ -21,7 +21,7 @@ jobs:
           lfs: false
 
       - name: Setup Node.js environment
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v7
         with:
           node-version: 16
           registry-url: "https://npm.pkg.github.com"
diff --git a/.github/workflows/PullRequest.yml b/.github/workflows/PullRequest.yml
index ae116eef..9ab1c551 100644
--- a/.github/workflows/PullRequest.yml
+++ b/.github/workflows/PullRequest.yml
@@ -28,7 +28,7 @@ jobs:
           lfs: true
 
       - name: Setup Node.js environment
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v7
         with:
           node-version: 16.x
 
diff --git a/.github/workflows/dependency-security.yml b/.github/workflows/dependency-security.yml
index 1b20c274..cd7c1bb8 100644
--- a/.github/workflows/dependency-security.yml
+++ b/.github/workflows/dependency-security.yml
@@ -43,7 +43,7 @@ jobs:
       # `npm audit --json`, and Node 22+ is avoided because its native TypeScript
       # stripping conflicts with ts-node/register during `npm run ci`.
       - name: Setup Node.js environment
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v7
         with:
           node-version: 20