diff --git a/.github/workflows/framework-gates.yml b/.github/workflows/framework-gates.yml
index 388ad85..11cc7b7 100644
--- a/.github/workflows/framework-gates.yml
+++ b/.github/workflows/framework-gates.yml
@@ -53,7 +53,7 @@ jobs:
       # 22.13 or newer, the engines floor of the 11.17 and 12.1 installs; under an older node of
       # the runner image they skip, and the listing could break unseen.
       - name: Setup Node
-        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
+        uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
           node-version: "22"
 
diff --git a/.github/workflows/mermaid-render-windows.yml b/.github/workflows/mermaid-render-windows.yml
index b4e6ed9..efb73a8 100644
--- a/.github/workflows/mermaid-render-windows.yml
+++ b/.github/workflows/mermaid-render-windows.yml
@@ -43,7 +43,7 @@ jobs:
 
       # Node meets the `engines.node` floor of the check pair (22.13).
       - name: Setup Node
-        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
+        uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
           node-version: "22"