diff --git a/.github/workflows/buf-binary-size.yaml b/.github/workflows/buf-binary-size.yaml
index 1d5ea7e2c1..fe61d95511 100644
--- a/.github/workflows/buf-binary-size.yaml
+++ b/.github/workflows/buf-binary-size.yaml
@@ -20,7 +20,7 @@ jobs:
       - name: checkout
         uses: actions/checkout@v7
       - name: setup-go
-        uses: actions/setup-go@v6
+        uses: actions/setup-go@v7
         with:
           go-version: "1.26.x"
           check-latest: true
diff --git a/.github/workflows/build-and-draft-release.yaml b/.github/workflows/build-and-draft-release.yaml
index 13e5cce89f..b820851e16 100644
--- a/.github/workflows/build-and-draft-release.yaml
+++ b/.github/workflows/build-and-draft-release.yaml
@@ -30,7 +30,7 @@ jobs:
         with:
           token: ${{ steps.app_token.outputs.token }}
       - name: Set up Go
-        uses: actions/setup-go@v6
+        uses: actions/setup-go@v7
         with:
           go-version: "1.26.x"
           check-latest: true
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 29a50059fa..301b383bc9 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -20,7 +20,7 @@ jobs:
       - name: checkout
         uses: actions/checkout@v7
       - name: setup-go
-        uses: actions/setup-go@v6
+        uses: actions/setup-go@v7
         with:
           go-version: "1.26.x"
           check-latest: true
@@ -48,7 +48,7 @@ jobs:
       - name: make-lint
         run: make lint
         env:
-          # actions/setup-go@v6 exports GOTOOLCHAIN=local via $GITHUB_ENV; override at the
+          # actions/setup-go@v7 exports GOTOOLCHAIN=local via $GITHUB_ENV; override at the
           # step level so go.mod's `go` directive can bootstrap a newer toolchain via the
           # module proxy when the runner image lags behind.
           GOTOOLCHAIN: auto
@@ -61,7 +61,7 @@ jobs:
       - name: checkout
         uses: actions/checkout@v7
       - name: setup-go
-        uses: actions/setup-go@v6
+        uses: actions/setup-go@v7
         with:
           go-version: "1.26.x"
           check-latest: true
diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml
index 380dbec659..a1708129f5 100644
--- a/.github/workflows/codeql.yaml
+++ b/.github/workflows/codeql.yaml
@@ -19,7 +19,7 @@ jobs:
       - name: checkout
         uses: actions/checkout@v7
       - name: setup-go
-        uses: actions/setup-go@v6
+        uses: actions/setup-go@v7
         with:
           go-version: "1.26.x"
           check-latest: true
diff --git a/.github/workflows/make-upgrade.yaml b/.github/workflows/make-upgrade.yaml
index 10c897f63d..63a9ac51ef 100644
--- a/.github/workflows/make-upgrade.yaml
+++ b/.github/workflows/make-upgrade.yaml
@@ -20,7 +20,7 @@ jobs:
         with:
           token: ${{ steps.app_token.outputs.token }}
       - name: setup-go
-        uses: actions/setup-go@v6
+        uses: actions/setup-go@v7
         with:
           go-version: "1.26.x"
           check-latest: true
diff --git a/.github/workflows/previous.yaml b/.github/workflows/previous.yaml
index 4b87331392..5e9a9fe599 100644
--- a/.github/workflows/previous.yaml
+++ b/.github/workflows/previous.yaml
@@ -23,7 +23,7 @@ jobs:
       - name: checkout
         uses: actions/checkout@v7
       - name: setup-go
-        uses: actions/setup-go@v6
+        uses: actions/setup-go@v7
         with:
           go-version: ${{ matrix.go-version }}
           check-latest: true
@@ -42,7 +42,7 @@ jobs:
       - name: make-test
         run: make test
         env:
-          # actions/setup-go@v6 exports GOTOOLCHAIN=local via $GITHUB_ENV; override at the
+          # actions/setup-go@v7 exports GOTOOLCHAIN=local via $GITHUB_ENV; override at the
           # step level so go.mod's `go` directive can bootstrap a newer toolchain via the
           # module proxy when the runner image lags behind.
           GOTOOLCHAIN: auto
diff --git a/.github/workflows/windows.yaml b/.github/workflows/windows.yaml
index 055300de5d..3cc08cb212 100644
--- a/.github/workflows/windows.yaml
+++ b/.github/workflows/windows.yaml
@@ -27,7 +27,7 @@ jobs:
       - name: checkout
         uses: actions/checkout@v7
       - name: setup-go
-        uses: actions/setup-go@v6
+        uses: actions/setup-go@v7
         with:
           go-version: "1.26.x"
           check-latest: true