diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index de6a6e7..4729ba8 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -14,7 +14,7 @@ jobs:
       pull-requests: write
     steps:
       - uses: actions/checkout@v7
-      - uses: actions/setup-node@v6
+      - uses: actions/setup-node@v7
         with:
           node-version: 24
           cache: npm
@@ -28,7 +28,7 @@ jobs:
       contents: read
     steps:
       - uses: actions/checkout@v7
-      - uses: actions/setup-node@v6
+      - uses: actions/setup-node@v7
         with:
           node-version: 26
           cache: npm
diff --git a/.github/workflows/release-abandon.yml b/.github/workflows/release-abandon.yml
index bec7bf0..f3495d2 100644
--- a/.github/workflows/release-abandon.yml
+++ b/.github/workflows/release-abandon.yml
@@ -35,7 +35,7 @@ jobs:
           fetch-depth: 0
 
       - name: Use Node.js
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@v7
         with:
           node-version: 24
 
diff --git a/.github/workflows/release-draft.yml b/.github/workflows/release-draft.yml
index 57cf1cb..0c29fc2 100644
--- a/.github/workflows/release-draft.yml
+++ b/.github/workflows/release-draft.yml
@@ -56,7 +56,7 @@ jobs:
           git checkout --detach "${TAG}"
 
       - name: Use Node.js
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@v7
         with:
           node-version: 24
           cache: npm
diff --git a/.github/workflows/release-package.yml b/.github/workflows/release-package.yml
index b65fa60..a9cc684 100644
--- a/.github/workflows/release-package.yml
+++ b/.github/workflows/release-package.yml
@@ -54,7 +54,7 @@ jobs:
           fetch-depth: 0
 
       - name: Use Node.js
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@v7
         with:
           node-version: ${{ env.NODE_VERSION }}
           cache: npm
@@ -107,7 +107,7 @@ jobs:
           ref: ${{ needs.build.outputs.tag }}
 
       - name: Use Node.js (npmjs)
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@v7
         with:
           node-version: ${{ env.NODE_VERSION }}
           registry-url: https://registry.npmjs.org/
diff --git a/CHANGELOG.md b/CHANGELOG.md
index d1f9ae1..d6d8647 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -11,6 +11,7 @@ The format is based on Keep a Changelog, and this project adheres to Semantic Ve
 
 - fix(deps): update vulnerable XML, HTTP, routing, URI, and YAML dependencies
 - docs(security): align reporting guidance with Node 24 and private vulnerability reporting
+- chore(ci): upgrade GitHub workflows to `actions/setup-node` v7
 
 ## [1.0.3] - 2026-07-14