diff --git a/.github/workflows/otci.yml b/.github/workflows/otci.yml
index 96c574b8d..9a6505028 100644
--- a/.github/workflows/otci.yml
+++ b/.github/workflows/otci.yml
@@ -66,7 +66,7 @@ jobs:
       with:
         submodules: recursive
         persist-credentials: false
-    - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
+    - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
       with:
         python-version: '3.12'
         cache: pip
diff --git a/.github/workflows/otns.yml b/.github/workflows/otns.yml
index 86bc96461..99fb67419 100644
--- a/.github/workflows/otns.yml
+++ b/.github/workflows/otns.yml
@@ -70,7 +70,7 @@ jobs:
       with:
         go-version: "1.23"
     - name: Set up Python
-      uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
+      uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
       with:
         python-version: "3.9"
     - name: Bootstrap
@@ -114,7 +114,7 @@ jobs:
         with:
           go-version: "1.23"
       - name: Set up Python
-        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
+        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
         with:
           python-version: "3.9"
       - name: Bootstrap
@@ -180,7 +180,7 @@ jobs:
         with:
           go-version: "1.23"
       - name: Set up Python
-        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
+        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
         with:
           python-version: "3.9"
       - name: Bootstrap
diff --git a/.github/workflows/posix.yml b/.github/workflows/posix.yml
index 2bc8c157f..40f04e5ae 100644
--- a/.github/workflows/posix.yml
+++ b/.github/workflows/posix.yml
@@ -60,7 +60,7 @@ jobs:
       with:
         submodules: recursive
         persist-credentials: false
-    - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
+    - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
       with:
         python-version: '3.12'
         cache: pip
diff --git a/.github/workflows/simulation.yml b/.github/workflows/simulation.yml
index d3a6a6031..151819947 100644
--- a/.github/workflows/simulation.yml
+++ b/.github/workflows/simulation.yml
@@ -57,7 +57,7 @@ jobs:
       with:
         submodules: recursive
         persist-credentials: false
-    - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
+    - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
       with:
         python-version: '3.12'
         cache: pip
@@ -148,7 +148,7 @@ jobs:
       with:
         submodules: recursive
         persist-credentials: false
-    - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
+    - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
       with:
         python-version: '3.12'
         cache: pip
@@ -194,7 +194,7 @@ jobs:
       with:
         submodules: recursive
         persist-credentials: false
-    - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
+    - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
       with:
         python-version: '3.12'
         cache: pip
diff --git a/.github/workflows/toranj.yml b/.github/workflows/toranj.yml
index fa9858cb8..b923263c7 100644
--- a/.github/workflows/toranj.yml
+++ b/.github/workflows/toranj.yml
@@ -67,7 +67,7 @@ jobs:
       with:
         submodules: recursive
         persist-credentials: false
-    - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
+    - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
       with:
         python-version: '3.12'
         cache: pip
@@ -104,7 +104,7 @@ jobs:
       with:
         submodules: recursive
         persist-credentials: false
-    - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
+    - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
       with:
         python-version: '3.12'
         cache: pip
@@ -143,7 +143,7 @@ jobs:
       with:
         submodules: recursive
         persist-credentials: false
-    - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
+    - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
       with:
         python-version: '3.12'
         cache: pip