diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index dd372ba..1de8a86 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -5,7 +5,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-      - uses: actions/setup-go@v5
+      - uses: actions/setup-go@v7
         with: { go-version-file: go.mod }
       - name: Check formatting
         run: test -z "$(gofmt -l .)" || { gofmt -l .; echo "run gofmt -w ."; exit 1; }
@@ -24,7 +24,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-      - uses: actions/setup-go@v5
+      - uses: actions/setup-go@v7
         with: { go-version-file: go.mod }
       - run: sudo -E env "PATH=$PATH" go test -tags integration -run 'TestNAT|TestRoute|TestMSS|TestAddress|TestJool|TestPCP|TestFirewall|TestAFTR|TestDHCPv6|TestRAServer' ./...
 
@@ -32,7 +32,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-      - uses: actions/setup-go@v5
+      - uses: actions/setup-go@v7
         with: { go-version-file: go.mod }
       # Built from source with the repo's Go toolchain: the prebuilt binaries lag
       # behind the Go version in go.mod and refuse to load the config.
@@ -67,7 +67,7 @@ jobs:
     steps:
       - uses: actions/checkout@v4
         with: { fetch-depth: 0 }
-      - uses: actions/setup-go@v5
+      - uses: actions/setup-go@v7
         with: { go-version-file: go.mod }
       - run: ./build.sh dev
       - name: Replace the dev release
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index e500623..ac47b7e 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -14,7 +14,7 @@ jobs:
     steps:
       - uses: actions/checkout@v4
         with: { fetch-depth: 0 }
-      - uses: actions/setup-go@v5
+      - uses: actions/setup-go@v7
         with: { go-version-file: go.mod }
       - run: go vet ./... && go test ./...
       - name: Cross-compile