diff --git a/.github/workflows/_ci-p1-windows-build-test.yml b/.github/workflows/_ci-p1-windows-build-test.yml
index 92eaa2e61..e58d042f1 100644
--- a/.github/workflows/_ci-p1-windows-build-test.yml
+++ b/.github/workflows/_ci-p1-windows-build-test.yml
@@ -84,7 +84,7 @@ jobs:
           dotnet-version: 8.0.x
 
       - name: Cache immutable NuGet packages only
-        uses: actions/cache@v5
+        uses: actions/cache@v6
         with:
           path: ~/.nuget/packages
           key: ci-p1-nuget-win-x64-${{ hashFiles('ARSAS/**/*.csproj', 'ARIEC61850/**/*.csproj', 'ARSAS/Directory.Packages.props', 'ARIEC61850/Directory.Packages.props') }}
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index dd6aa6470..8d66f8e93 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -97,7 +97,7 @@ jobs:
           }
 
       - name: Set up Python for read-only maintenance inventory
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@v7
         with:
           python-version: '3.11'
 
diff --git a/.github/workflows/installer-windows.yml b/.github/workflows/installer-windows.yml
index c0701d288..a72e9a4cc 100644
--- a/.github/workflows/installer-windows.yml
+++ b/.github/workflows/installer-windows.yml
@@ -246,7 +246,7 @@ jobs:
 
       - name: Setup Python for sealed package verification
         if: github.event_name != 'workflow_dispatch'
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@v7
         with:
           python-version: '3.11'
 
diff --git a/.github/workflows/smart-discovery-capture-build.yml b/.github/workflows/smart-discovery-capture-build.yml
index 95fe9fae7..988e92941 100644
--- a/.github/workflows/smart-discovery-capture-build.yml
+++ b/.github/workflows/smart-discovery-capture-build.yml
@@ -292,7 +292,7 @@ jobs:
 
       - name: Setup Python for sealed canonical package verification
         if: github.event_name == 'pull_request'
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@v7
         with:
           python-version: '3.11'
 
diff --git a/.github/workflows/smart-discovery-mainline-readiness.yml b/.github/workflows/smart-discovery-mainline-readiness.yml
index 10b3562b9..01cab7c2d 100644
--- a/.github/workflows/smart-discovery-mainline-readiness.yml
+++ b/.github/workflows/smart-discovery-mainline-readiness.yml
@@ -215,7 +215,7 @@ jobs:
 
       - name: Set up Python for canonical regression evidence verification
         if: github.event_name == 'pull_request'
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@v7
         with:
           python-version: '3.11'
 
diff --git a/.github/workflows/smart-discovery-post-merge-production.yml b/.github/workflows/smart-discovery-post-merge-production.yml
index 73f767e5f..da9ba6ea7 100644
--- a/.github/workflows/smart-discovery-post-merge-production.yml
+++ b/.github/workflows/smart-discovery-post-merge-production.yml
@@ -103,7 +103,7 @@ jobs:
           "ENGINE_FULL_REGRESSION_VERIFIED=true" | Out-File $env:GITHUB_ENV -Encoding utf8 -Append
 
       - name: Setup Python for exact-main canonical regression evidence
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@v7
         with:
           python-version: '3.11'
 
diff --git a/.github/workflows/smart-discovery-production-promotion.yml b/.github/workflows/smart-discovery-production-promotion.yml
index fc6defb4b..4ccfca356 100644
--- a/.github/workflows/smart-discovery-production-promotion.yml
+++ b/.github/workflows/smart-discovery-production-promotion.yml
@@ -67,7 +67,7 @@ jobs:
           }
 
       - name: Setup Python for bounded canonical evidence verification
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@v7
         with:
           python-version: '3.11'