diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index f6d80746..9402f764 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -378,7 +378,7 @@ jobs:
           go-version: "1.25"
           cache: false
 
-      - uses: actions/setup-python@v6
+      - uses: actions/setup-python@v7
         with:
           python-version: "3.11"
 
diff --git a/.github/workflows/publish-clients.yml b/.github/workflows/publish-clients.yml
index 017ed2d8..cc98e485 100644
--- a/.github/workflows/publish-clients.yml
+++ b/.github/workflows/publish-clients.yml
@@ -70,7 +70,7 @@ jobs:
       publish: ${{ steps.version.outputs.publish }}
     steps:
       - uses: actions/checkout@v7
-      - uses: actions/setup-python@v6
+      - uses: actions/setup-python@v7
         with:
           python-version: '3.11'
       # Asked for rather than assumed. Node came with the hosted image and this
diff --git a/.github/workflows/publish-docs.yml b/.github/workflows/publish-docs.yml
index 80025807..7afa0de8 100644
--- a/.github/workflows/publish-docs.yml
+++ b/.github/workflows/publish-docs.yml
@@ -114,7 +114,7 @@ jobs:
 
       # The version the site's own build runs on, so a page that builds here
       # builds there too.
-      - uses: actions/setup-python@v6
+      - uses: actions/setup-python@v7
         with:
           python-version: '3.12'