diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index c6fab43fb9..3db0527761 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -42,7 +42,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v7
-      - uses: actions/setup-node@v5
+      - uses: actions/setup-node@v7.1.0
         with:
           node-version: "26"
           cache: npm
@@ -301,7 +301,7 @@ jobs:
         working-directory: web
     steps:
       - uses: actions/checkout@v7
-      - uses: actions/setup-node@v5
+      - uses: actions/setup-node@v7.1.0
         with:
           node-version: "26"
           cache: npm
@@ -339,7 +339,7 @@ jobs:
         working-directory: web
     steps:
       - uses: actions/checkout@v7
-      - uses: actions/setup-node@v5
+      - uses: actions/setup-node@v7.1.0
         with:
           node-version: "26"
           cache: npm
@@ -373,7 +373,7 @@ jobs:
     steps:
       - uses: actions/checkout@v7
 
-      - uses: actions/setup-node@v5
+      - uses: actions/setup-node@v7.1.0
         with:
           node-version: "26"
           cache: npm
diff --git a/.github/workflows/cleanup.yml b/.github/workflows/cleanup.yml
index ada7e63d8c..632d5f2f09 100644
--- a/.github/workflows/cleanup.yml
+++ b/.github/workflows/cleanup.yml
@@ -36,7 +36,7 @@ jobs:
       packages: write
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
-      - uses: actions/setup-node@v5
+      - uses: actions/setup-node@v7.1.0
         with:
           node-version: '22'
       - name: Test retention policy
diff --git a/.github/workflows/copilot-setup-steps.yml b/.github/workflows/copilot-setup-steps.yml
index b7e63eb17c..68d659f6e6 100644
--- a/.github/workflows/copilot-setup-steps.yml
+++ b/.github/workflows/copilot-setup-steps.yml
@@ -57,7 +57,7 @@ jobs:
           sudo apt-get install --no-install-recommends -y libatomic1
 
       - name: Set up Node.js
-        uses: actions/setup-node@v5
+        uses: actions/setup-node@v7.1.0
         with:
           node-version: "26"
           cache: "npm"
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index 39aec44fa9..3b9eff0e68 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -36,7 +36,7 @@ jobs:
         with:
           fetch-depth: 0
 
-      - uses: actions/setup-node@v5
+      - uses: actions/setup-node@v7.1.0
         with:
           node-version: "26"
           cache: npm
diff --git a/.github/workflows/frontend-quality.yml b/.github/workflows/frontend-quality.yml
index df31a02322..78bc58cfc0 100644
--- a/.github/workflows/frontend-quality.yml
+++ b/.github/workflows/frontend-quality.yml
@@ -41,7 +41,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v7
-      - uses: actions/setup-node@v5
+      - uses: actions/setup-node@v7.1.0
         with:
           node-version: '26'
           cache: npm
@@ -74,7 +74,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v7
-      - uses: actions/setup-node@v5
+      - uses: actions/setup-node@v7.1.0
         with:
           node-version: '26'
           cache: npm
@@ -182,7 +182,7 @@ jobs:
           - {name: performance, suite: performance, shard: '1/1'}
     steps:
       - uses: actions/checkout@v7
-      - uses: actions/setup-node@v5
+      - uses: actions/setup-node@v7.1.0
         with:
           node-version: '26'
           cache: npm
@@ -237,7 +237,7 @@ jobs:
         shard: [1, 2, 3]
     steps:
       - uses: actions/checkout@v7
-      - uses: actions/setup-node@v5
+      - uses: actions/setup-node@v7.1.0
         with:
           node-version: '26'
           cache: npm
@@ -299,7 +299,7 @@ jobs:
         ]
     steps:
       - uses: actions/checkout@v7
-      - uses: actions/setup-node@v5
+      - uses: actions/setup-node@v7.1.0
         with:
           node-version: '26'
           cache: npm
@@ -348,7 +348,7 @@ jobs:
     needs: contract
     steps:
       - uses: actions/checkout@v7
-      - uses: actions/setup-node@v5
+      - uses: actions/setup-node@v7.1.0
         with:
           node-version: '26'
           cache: npm
diff --git a/.github/workflows/perf.yml b/.github/workflows/perf.yml
index 0d3c4cb36a..719bd34e39 100644
--- a/.github/workflows/perf.yml
+++ b/.github/workflows/perf.yml
@@ -37,7 +37,7 @@ jobs:
     steps:
       - uses: actions/checkout@v7
 
-      - uses: actions/setup-node@v5
+      - uses: actions/setup-node@v7.1.0
         with:
           node-version: '26'
           cache: 'npm'
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index d68584f167..ed3dcb6c57 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -672,7 +672,7 @@ jobs:
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
-      - uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5
+      - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
           node-version: '26'
 
@@ -724,7 +724,7 @@ jobs:
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
-      - uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5
+      - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
           node-version: '26'
 
diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
index 788c811e53..9bb3cb78c3 100644
--- a/.github/workflows/security.yml
+++ b/.github/workflows/security.yml
@@ -213,7 +213,7 @@ jobs:
             "${GITLEAKS_IMAGE}" \
             detect --source=/fixture/allowlist-control --config=/config.toml --no-git --redact --no-banner
 
-      - uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5
+      - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
           node-version: "26"