diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 4839f62..1fb3139 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -26,7 +26,7 @@ jobs:
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
-      - uses: actions/setup-node@v4 # TODO: pin to SHA
+      - uses: actions/setup-node@v7 # TODO: pin to SHA
         with:
           node-version: 22
 
@@ -73,7 +73,7 @@ jobs:
         with:
           fetch-depth: 0 # fallow audit diffs against the base ref
 
-      - uses: actions/setup-node@v4 # TODO: pin to SHA
+      - uses: actions/setup-node@v7 # TODO: pin to SHA
         with:
           node-version: 22