diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 25fc12f7..c1b89222 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -45,7 +45,7 @@ jobs:
     steps:
       - uses: actions/checkout@v4
 
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v7
         with:
           node-version: "20"
           cache: npm
diff --git a/.github/workflows/desktop.yml b/.github/workflows/desktop.yml
index 0008f9dc..c2025266 100644
--- a/.github/workflows/desktop.yml
+++ b/.github/workflows/desktop.yml
@@ -96,7 +96,7 @@ jobs:
             patchelf \
             libgtk-3-dev
 
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v7
         with:
           node-version: "20"
           cache: npm
diff --git a/.github/workflows/pages.yml b/.github/workflows/pages.yml
index 61b106fd..25c85241 100644
--- a/.github/workflows/pages.yml
+++ b/.github/workflows/pages.yml
@@ -31,7 +31,7 @@ jobs:
     steps:
       - uses: actions/checkout@v4
 
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v7
         with:
           node-version: "20"
           cache: npm
diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
index d8ec4d60..772bc446 100644
--- a/.github/workflows/security.yml
+++ b/.github/workflows/security.yml
@@ -44,7 +44,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v7
         with: { node-version: "20", cache: npm, cache-dependency-path: package-lock.json }
       - run: npm ci
       - name: npm audit (production deps)