diff --git a/.github/workflows/native_verify.yml b/.github/workflows/native_verify.yml
index 930cc53..ea95023 100644
--- a/.github/workflows/native_verify.yml
+++ b/.github/workflows/native_verify.yml
@@ -32,7 +32,7 @@ jobs:
       - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5  # v4
 
       - name: Set up Node.js
-        uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af  # v4.1.0
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020  # v7.0.0
         with:
           node-version: "22"
           cache: "npm"
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index ae40c19..7a7a239 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -42,7 +42,7 @@ jobs:
         uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5  # v4
 
       - name: Set up Node.js
-        uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af  # v4.1.0
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020  # v7.0.0
         with:
           node-version: "22"
           cache: "npm"
@@ -147,7 +147,7 @@ jobs:
       # ── 3. Linux: GTK3 + WebKit2GTK system packages ────────────────────────
       - name: Set up Node.js for Windows packaged browser smoke
         if: runner.os == 'Windows'
-        uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af  # v4.1.0
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020  # v7.0.0
         with:
           node-version: "22"
           cache: "npm"