diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index a098c91..62ac226 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -40,7 +40,7 @@ jobs:
       - uses: dtolnay/rust-toolchain@360a4e93673de6630fac2478bc9e35244b01a759  # 1.88.0
         with:
           components: rustfmt, clippy  # what rust-toolchain.toml lists, installed up front
-      - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065  # v5.6.0
+      - uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0  # v7.1.0
         with:
           python-version: ${{ matrix.python-version }}
       - name: Build extension + install test deps
@@ -62,7 +62,7 @@ jobs:
       - uses: dtolnay/rust-toolchain@360a4e93673de6630fac2478bc9e35244b01a759  # 1.88.0
         with:
           components: rustfmt, clippy  # what rust-toolchain.toml lists, installed up front
-      - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065  # v5.6.0
+      - uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0  # v7.1.0
         with:
           python-version: "3.13"
       - name: Build extension + docs tooling
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 23c73f9..16377b2 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -41,7 +41,7 @@ jobs:
         with:
           components: rustfmt, clippy  # what rust-toolchain.toml lists, installed up front
       - run: cargo test --all
-      - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065  # v5.6.0
+      - uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0  # v7.1.0
         with:
           python-version: "3.12"
       - name: Build extension + install test deps, run pytest
@@ -94,7 +94,7 @@ jobs:
         with:
           name: dist
           path: dist
-      - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065  # v5.6.0
+      - uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0  # v7.1.0
         with:
           python-version: ${{ matrix.python }}
       - uses: dtolnay/rust-toolchain@360a4e93673de6630fac2478bc9e35244b01a759  # 1.88.0; the external-crate test and the sdist build