diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index b50d544..ebab290 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -17,7 +17,7 @@ jobs:
         with:
           fetch-depth: 0
 
-      - uses: actions/setup-node@v6
+      - uses: actions/setup-node@v7
         with:
           node-version: '22.x'
           cache: npm
@@ -60,7 +60,7 @@ jobs:
     steps:
       - uses: actions/checkout@v6
 
-      - uses: actions/setup-node@v6
+      - uses: actions/setup-node@v7
         with:
           node-version: '22.x'
 
@@ -86,7 +86,7 @@ jobs:
       # Pin Node 22.x (matches the other jobs). Without this, check-all ran on the
       # runner's default Node, where node:sqlite is unavailable/partial and the
       # mcp-server suite failed ~129 sqlite-backed tests.
-      - uses: actions/setup-node@v6
+      - uses: actions/setup-node@v7
         with:
           node-version: '22.x'
       # check-all.sh runs the mcp-server suite, which needs better-sqlite3 +
@@ -121,7 +121,7 @@ jobs:
     steps:
       - uses: actions/checkout@v6
 
-      - uses: actions/setup-node@v6
+      - uses: actions/setup-node@v7
         with:
           node-version: '22.x'
 
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 3b27f8b..1788617 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -17,7 +17,7 @@ jobs:
         with:
           fetch-depth: 0
 
-      - uses: actions/setup-node@v6
+      - uses: actions/setup-node@v7
         with:
           node-version: '22.x'
           cache: npm
@@ -63,7 +63,7 @@ jobs:
     steps:
       - uses: actions/checkout@v6
       # Node 22.x: node:sqlite is unavailable/partial on the runner default.
-      - uses: actions/setup-node@v6
+      - uses: actions/setup-node@v7
         with:
           node-version: '22.x'
       # check-all.sh runs the mcp-server suite, which needs better-sqlite3 +
@@ -94,7 +94,7 @@ jobs:
       # Trusted Publishing OIDC token exchange. Avoids the known in-place
       # `npm install -g npm@latest` self-upgrade corruption (promise-retry
       # missing mid-swap, see github.com/npm/cli/issues for the lineage).
-      - uses: actions/setup-node@v6
+      - uses: actions/setup-node@v7
         with:
           node-version: '24.x'
           registry-url: 'https://registry.npmjs.org'
diff --git a/.github/workflows/windows-smoke.yml b/.github/workflows/windows-smoke.yml
index d9a9716..62361bb 100644
--- a/.github/workflows/windows-smoke.yml
+++ b/.github/workflows/windows-smoke.yml
@@ -20,7 +20,7 @@ jobs:
     steps:
       - uses: actions/checkout@v6
 
-      - uses: actions/setup-node@v6
+      - uses: actions/setup-node@v7
         with:
           node-version: '22.x'
           cache: npm