diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index bc5f7ba..9f9a4a8 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -6,14 +6,14 @@ jobs:
   test:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - uses: ruby/setup-ruby@v1
         with: { bundler-cache: true }
       # update: refresh the local ruby-advisory-db clone first so check
       # never runs against a stale snapshot cached from a prior run.
       - run: bundle exec rake bundle:audit:update bundle:audit:check
       # Node present ONLY to build the bundle and run conformance reference
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v7
         with: { node-version: "22" }
       - run: bundle exec rake bundle:build
       - run: bundle exec rspec