diff --git a/.github/workflows/nullstate-sarif.yml b/.github/workflows/nullstate-sarif.yml
index d56280f..2b2a834 100644
--- a/.github/workflows/nullstate-sarif.yml
+++ b/.github/workflows/nullstate-sarif.yml
@@ -15,7 +15,7 @@ jobs:
       - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10
         with:
           persist-credentials: false
-      - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405
+      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97
         with:
           python-version: "3.13"
       - name: Install
diff --git a/.github/workflows/pr-checks.yml b/.github/workflows/pr-checks.yml
index 10b44f7..5f00362 100644
--- a/.github/workflows/pr-checks.yml
+++ b/.github/workflows/pr-checks.yml
@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v6
-      - uses: actions/setup-python@v6
+      - uses: actions/setup-python@v7
         with:
           python-version: "3.13"
       - name: Install
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 12cac99..9ba79e8 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -22,7 +22,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v6
-      - uses: actions/setup-python@v6
+      - uses: actions/setup-python@v7
         with:
           python-version: "3.13"
       - name: Build package