diff --git a/.github/workflows/ci-gh-lint.yml b/.github/workflows/ci-gh-lint.yml
index 5efa8da6f5..7dbd87568d 100644
--- a/.github/workflows/ci-gh-lint.yml
+++ b/.github/workflows/ci-gh-lint.yml
@@ -59,7 +59,7 @@ jobs:
           } > ${{ runner.temp }}/requirements.txt
 
       - name: Setup Python
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@v7
         with:
           python-version: '3.14'
           cache: 'pip'
diff --git a/.github/workflows/renovate.yml b/.github/workflows/renovate.yml
index da643848a9..ec150621b2 100644
--- a/.github/workflows/renovate.yml
+++ b/.github/workflows/renovate.yml
@@ -69,7 +69,7 @@ jobs:
           repositories: ${{ github.event.repository.name }}
 
       - name: Self-hosted Renovate
-        uses: renovatebot/github-action@v46.1.19
+        uses: renovatebot/github-action@v46.1.20
         env:
           LOG_LEVEL: ${{ steps.config.outputs.log_level }}
           RENOVATE_DRY_RUN: ${{ steps.config.outputs.dry_run }}
diff --git a/.github/workflows/wheels-mac-profiler.yml b/.github/workflows/wheels-mac-profiler.yml
index a69fa9d534..309e7489c3 100644
--- a/.github/workflows/wheels-mac-profiler.yml
+++ b/.github/workflows/wheels-mac-profiler.yml
@@ -64,7 +64,7 @@ jobs:
           role-to-assume: arn:aws:iam::279114543810:role/gha-oidc-nv-legate
 
       - name: Set up Python
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@v7
         with:
           python-version: ${{ env.PY_VER }}
 
diff --git a/.github/workflows/wheels-mac.yml b/.github/workflows/wheels-mac.yml
index ddacff128e..ff5a7cd9d3 100644
--- a/.github/workflows/wheels-mac.yml
+++ b/.github/workflows/wheels-mac.yml
@@ -131,7 +131,7 @@ jobs:
           path: wheelhouse/*.whl
 
       - name: Set up Python
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@v7
         with:
           python-version: ${{ matrix.PY_VER }}