diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 33d90d8e..391a3be5 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -168,7 +168,7 @@ jobs:
       # line bound to NODE_AUTH_TOKEN, and an empty token there shadows OIDC.
       # Node 24 bundles npm >= 11.5.1, which OIDC trusted publishing requires.
       - name: Setup Node
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@v7
         with:
           node-version: 24