diff --git a/.github/workflows/backlog-sync.yml b/.github/workflows/backlog-sync.yml
index 77509d0..e32aca1 100644
--- a/.github/workflows/backlog-sync.yml
+++ b/.github/workflows/backlog-sync.yml
@@ -27,7 +27,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-      - uses: actions/setup-go@v5
+      - uses: actions/setup-go@v7
         with:
           go-version: "1.25"
       - name: Sync backlog → issues
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 96c7169..c251585 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-      - uses: actions/setup-go@v5
+      - uses: actions/setup-go@v7
         with:
           go-version: "1.25"
       - run: go vet ./...
@@ -63,7 +63,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-      - uses: actions/setup-go@v5
+      - uses: actions/setup-go@v7
         with:
           go-version: "stable"
       - name: govulncheck (gate)
diff --git a/.github/workflows/desktop-test.yml b/.github/workflows/desktop-test.yml
index 9ae45e4..9114f6a 100644
--- a/.github/workflows/desktop-test.yml
+++ b/.github/workflows/desktop-test.yml
@@ -21,7 +21,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-      - uses: actions/setup-go@v5
+      - uses: actions/setup-go@v7
         with:
           go-version: "1.25"
       - name: Wails prerequisites
@@ -135,7 +135,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-      - uses: actions/setup-go@v5
+      - uses: actions/setup-go@v7
         with:
           go-version: "1.25"
       - name: Prerequisites
diff --git a/.github/workflows/desktop.yml b/.github/workflows/desktop.yml
index a1117cb..289843f 100644
--- a/.github/workflows/desktop.yml
+++ b/.github/workflows/desktop.yml
@@ -48,7 +48,7 @@ jobs:
           fetch-depth: 0
           ref: ${{ inputs.ref }}
 
-      - uses: actions/setup-go@v5
+      - uses: actions/setup-go@v7
         with:
           go-version: "1.25"
 
diff --git a/.github/workflows/fuzz.yml b/.github/workflows/fuzz.yml
index ac54466..54d76fe 100644
--- a/.github/workflows/fuzz.yml
+++ b/.github/workflows/fuzz.yml
@@ -42,7 +42,7 @@ jobs:
             target: FuzzParseJSZ
     steps:
       - uses: actions/checkout@v4
-      - uses: actions/setup-go@v5
+      - uses: actions/setup-go@v7
         with:
           go-version: "1.25"
       - name: Fuzz ${{ matrix.target }}
diff --git a/.github/workflows/integration.yml b/.github/workflows/integration.yml
index 7a04fbf..447a7e0 100644
--- a/.github/workflows/integration.yml
+++ b/.github/workflows/integration.yml
@@ -27,7 +27,7 @@ jobs:
       CF_MONGO_PASSWORD: checkfleet
     steps:
       - uses: actions/checkout@v4
-      - uses: actions/setup-go@v5
+      - uses: actions/setup-go@v7
         with:
           go-version: "1.25"
 
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 9691c63..c8236a9 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -25,7 +25,7 @@ jobs:
       - uses: actions/checkout@v4
         with:
           fetch-depth: 0 # full history for the changelog
-      - uses: actions/setup-go@v5
+      - uses: actions/setup-go@v7
         with:
           go-version: "1.25"
       - uses: docker/setup-qemu-action@v3