diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index f627d0c..a4d4a41 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -97,7 +97,7 @@ jobs:
       # The examples use only the standard library, so there is no go.sum to
       # hash. Keying the cache on go.mod keeps setup-go's cache step valid; it
       # silently skipped caching while this pointed at a file that never existed.
-      - uses: actions/setup-go@v5
+      - uses: actions/setup-go@v7
         with:
           go-version-file: go/go.mod
           cache-dependency-path: go/go.mod
diff --git a/.github/workflows/validate-examples.yml b/.github/workflows/validate-examples.yml
index f0f747c..094a6c5 100644
--- a/.github/workflows/validate-examples.yml
+++ b/.github/workflows/validate-examples.yml
@@ -129,7 +129,7 @@ jobs:
 
       # No go.sum exists - the examples are standard-library only - so the cache
       # is keyed on go.mod instead. See the matching note in ci.yml.
-      - uses: actions/setup-go@v5
+      - uses: actions/setup-go@v7
         with:
           go-version-file: go/go.mod
           cache-dependency-path: go/go.mod