diff --git a/.github/workflows/create-release-pr.yaml b/.github/workflows/create-release-pr.yaml
index 2adee0a..fed0b34 100644
--- a/.github/workflows/create-release-pr.yaml
+++ b/.github/workflows/create-release-pr.yaml
@@ -205,7 +205,7 @@ jobs:
     env:
       architect_flags: "--organisation ${{ github.repository_owner }} --project ${{ needs.gather_facts.outputs.repo_name }}"
     steps:
-      - uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0
+      - uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0
         with:
           go-version: '=1.26.5'
       - name: Install architect
diff --git a/.github/workflows/create-release.yaml b/.github/workflows/create-release.yaml
index 91ba2d5..a101587 100644
--- a/.github/workflows/create-release.yaml
+++ b/.github/workflows/create-release.yaml
@@ -380,7 +380,7 @@ jobs:
           download_url: "https://github.com/giantswarm/${binary}/releases/download/${version}/${binary}-linux-amd64"
           smoke_test: "${binary} --version"
       - name: Set up Go ${{ env.GO_VERSION }}
-        uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0
+        uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0
         with:
           go-version: ${{ env.GO_VERSION }}
       - name: Checkout code
diff --git a/.github/workflows/documentation-validation.yaml b/.github/workflows/documentation-validation.yaml
index 142ad1d..0d669a6 100644
--- a/.github/workflows/documentation-validation.yaml
+++ b/.github/workflows/documentation-validation.yaml
@@ -19,7 +19,7 @@ jobs:
       GO_VERSION: 1.26.3
     steps:
       - name: Set up Go ${{ env.GO_VERSION }}
-        uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0
+        uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0
         with:
           go-version: ${{ env.GO_VERSION }}
       - name: Checkout code
diff --git a/.github/workflows/go-coverage.yaml b/.github/workflows/go-coverage.yaml
index 6504328..72e8fd3 100644
--- a/.github/workflows/go-coverage.yaml
+++ b/.github/workflows/go-coverage.yaml
@@ -28,7 +28,7 @@ jobs:
           # default fetch-depth is insufficent to find previous coverage notes
           fetch-depth: 10
 
-      - uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0
+      - uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0
         with:
           go-version: '=1.26.5'