diff --git a/.github/workflows/backend-tests.yml b/.github/workflows/backend-tests.yml
index a4ebcd8a..ab0186b2 100644
--- a/.github/workflows/backend-tests.yml
+++ b/.github/workflows/backend-tests.yml
@@ -42,7 +42,7 @@ jobs:
           repository: ether/etherpad-lite
           ref: ${{ matrix.core_ref }}
           path: etherpad-lite
-      - uses: actions/setup-node@v6
+      - uses: actions/setup-node@v7
         name: Install Node.js
         with:
           node-version: ${{ matrix.node }}
diff --git a/.github/workflows/frontend-tests.yml b/.github/workflows/frontend-tests.yml
index a01ef6e3..d0cb12dd 100644
--- a/.github/workflows/frontend-tests.yml
+++ b/.github/workflows/frontend-tests.yml
@@ -33,7 +33,7 @@ jobs:
           repository: ether/etherpad-lite
           ref: ${{ matrix.core_ref }}
           path: etherpad-lite
-      - uses: actions/setup-node@v6
+      - uses: actions/setup-node@v7
         name: Install Node.js
         with:
           node-version: ${{ matrix.node }}
diff --git a/.github/workflows/npmpublish.yml b/.github/workflows/npmpublish.yml
index 38c781fe..c66b640f 100644
--- a/.github/workflows/npmpublish.yml
+++ b/.github/workflows/npmpublish.yml
@@ -18,7 +18,7 @@ jobs:
       contents: write   # for the atomic version-bump push (branch + tag)
       id-token: write   # for npm OIDC trusted publishing
     steps:
-      - uses: actions/setup-node@v6
+      - uses: actions/setup-node@v7
         with:
           # OIDC trusted publishing needs npm >= 11.5.1, which requires
           # Node >= 20.17.0. setup-node's `20` resolves to the latest