diff --git a/.github/workflows/backend-tests.yml b/.github/workflows/backend-tests.yml
index 91c8c78..ce9c79e 100644
--- a/.github/workflows/backend-tests.yml
+++ b/.github/workflows/backend-tests.yml
@@ -37,7 +37,7 @@ jobs:
       - uses: actions/checkout@v6
 
       - name: Set up Python
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@v7
         with:
           python-version: '3.12'
           # Cache pip between runs — big speedup since sentence-transformers
@@ -68,7 +68,7 @@ jobs:
       - uses: actions/checkout@v6
 
       - name: Set up Python
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@v7
         with:
           python-version: '3.12'
           cache: 'pip'
diff --git a/.github/workflows/check-docs.yml b/.github/workflows/check-docs.yml
index 8ee6846..8a8e4f2 100644
--- a/.github/workflows/check-docs.yml
+++ b/.github/workflows/check-docs.yml
@@ -54,7 +54,7 @@ jobs:
         uses: actions/checkout@v6
 
       - name: Set up Python
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@v7
         with:
           # Matches render.yaml PYTHON_VERSION so AST parsing of source files
           # uses the same language level as production.
diff --git a/.github/workflows/mutation-testing-pr.yml b/.github/workflows/mutation-testing-pr.yml
index 2c689b9..97ccaf2 100644
--- a/.github/workflows/mutation-testing-pr.yml
+++ b/.github/workflows/mutation-testing-pr.yml
@@ -158,7 +158,7 @@ jobs:
         with:
           fetch-depth: 0
 
-      - uses: actions/setup-python@v6
+      - uses: actions/setup-python@v7
         with:
           python-version: "3.12"
           cache: pip
diff --git a/.github/workflows/mutation-testing.yml b/.github/workflows/mutation-testing.yml
index 237f70f..829a09b 100644
--- a/.github/workflows/mutation-testing.yml
+++ b/.github/workflows/mutation-testing.yml
@@ -229,7 +229,7 @@ jobs:
     steps:
       - uses: actions/checkout@v6
 
-      - uses: actions/setup-python@v6
+      - uses: actions/setup-python@v7
         with:
           python-version: "3.12"
           cache: pip
diff --git a/.github/workflows/ruff.yml b/.github/workflows/ruff.yml
index 94b938d..fa90157 100644
--- a/.github/workflows/ruff.yml
+++ b/.github/workflows/ruff.yml
@@ -35,7 +35,7 @@ jobs:
       - uses: actions/checkout@v6
 
       - name: Set up Python
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@v7
         with:
           python-version: '3.12'
 
diff --git a/.github/workflows/test-quality.yml b/.github/workflows/test-quality.yml
index 666786c..f68b8c8 100644
--- a/.github/workflows/test-quality.yml
+++ b/.github/workflows/test-quality.yml
@@ -36,7 +36,7 @@ jobs:
       - uses: actions/checkout@v6
 
       - name: Set up Python
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@v7
         with:
           python-version: "3.12"
           cache: pip