diff --git a/.github/workflows/check-skills.yml b/.github/workflows/check-skills.yml
index 48a6576..53a89d7 100644
--- a/.github/workflows/check-skills.yml
+++ b/.github/workflows/check-skills.yml
@@ -32,7 +32,7 @@ jobs:
         uses: actions/checkout@v4
 
       - name: Setup Node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v7
         with:
           node-version: 20
 
@@ -56,7 +56,7 @@ jobs:
           fetch-depth: 0
 
       - name: Setup Node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v7
         with:
           node-version: 20
 
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index c86c42d..27d7d78 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -34,7 +34,7 @@ jobs:
       # npm 10.x in PATH → `npm publish` can't detect OIDC → ENEEDAUTH.
       # Node 24 ships npm 11.x; npm then auto-authenticates via OIDC (no token).
       - name: Setup Node + npm for trusted publishing
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@v7
         with:
           node-version: "24"
           registry-url: "https://registry.npmjs.org"