diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 72afe3ebf..c9672ccef 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -48,7 +48,7 @@ jobs:
           persist-credentials: false
 
       - name: Setup Node.js
-        uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version-file: ".nvmrc"
 
diff --git a/.github/workflows/dependency-report.yml b/.github/workflows/dependency-report.yml
index 6ae34417e..f5c12c6ed 100644
--- a/.github/workflows/dependency-report.yml
+++ b/.github/workflows/dependency-report.yml
@@ -31,7 +31,7 @@ jobs:
           persist-credentials: false
 
       - name: Setup Node.js
-        uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version-file: ".nvmrc"
           cache: npm
diff --git a/.github/workflows/eval-canary.yml b/.github/workflows/eval-canary.yml
index 9d651dfe9..2f06cac76 100644
--- a/.github/workflows/eval-canary.yml
+++ b/.github/workflows/eval-canary.yml
@@ -78,7 +78,7 @@ jobs:
 
       - name: Setup Node.js
         id: setup_node
-        uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version-file: ".nvmrc"
           cache: npm
diff --git a/.github/workflows/ingestion-autopilot.yml b/.github/workflows/ingestion-autopilot.yml
index 6715da82e..6c6b82f40 100644
--- a/.github/workflows/ingestion-autopilot.yml
+++ b/.github/workflows/ingestion-autopilot.yml
@@ -53,7 +53,7 @@ jobs:
           fi
 
       - name: Setup Node.js
-        uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version-file: ".nvmrc"
           cache: npm
diff --git a/.github/workflows/live-drift.yml b/.github/workflows/live-drift.yml
index e20e2bd5b..f28d14c1e 100644
--- a/.github/workflows/live-drift.yml
+++ b/.github/workflows/live-drift.yml
@@ -43,7 +43,7 @@ jobs:
           fi
 
       - name: Setup Node.js
-        uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version-file: ".nvmrc"
           cache: npm
diff --git a/.github/workflows/ops-digest.yml b/.github/workflows/ops-digest.yml
index da97469d8..fdae41ffc 100644
--- a/.github/workflows/ops-digest.yml
+++ b/.github/workflows/ops-digest.yml
@@ -45,7 +45,7 @@ jobs:
           fi
 
       - name: Setup Node.js
-        uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version-file: ".nvmrc"
 
diff --git a/.github/workflows/staging-tenancy.yml b/.github/workflows/staging-tenancy.yml
index 71cb0cdd0..5b1fbe1e0 100644
--- a/.github/workflows/staging-tenancy.yml
+++ b/.github/workflows/staging-tenancy.yml
@@ -24,7 +24,7 @@ jobs:
           persist-credentials: false
 
       - name: Setup Node.js
-        uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version-file: ".nvmrc"
           cache: npm
diff --git a/scripts/github-action-pins.mjs b/scripts/github-action-pins.mjs
index 02240377a..f5bccb191 100644
--- a/scripts/github-action-pins.mjs
+++ b/scripts/github-action-pins.mjs
@@ -6,7 +6,13 @@ const reviewedActionPins = new Map([
       ["9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0", "v7.0.0"],
     ]),
   ],
-  ["actions/setup-node", new Map([["a0853c24544627f65ddf259abe73b1d18a591444", "v5.0.0"]])],
+  [
+    "actions/setup-node",
+    new Map([
+      ["a0853c24544627f65ddf259abe73b1d18a591444", "v5.0.0"],
+      ["820762786026740c76f36085b0efc47a31fe5020", "v7.0.0"],
+    ]),
+  ],
   ["actions/github-script", new Map([["3a2844b7e9c422d3c10d287c895573f7108da1b3", "v9.0.0"]])],
   ["actions/cache", new Map([["55cc8345863c7cc4c66a329aec7e433d2d1c52a9", "v6"]])],
   ["actions/upload-artifact", new Map([["043fb46d1a93c77aae656e7c1c64a875d1fc6a0a", "v7"]])],