diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 659fd6b..c54474b 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -74,7 +74,7 @@ jobs:
       # points nowhere near the cause. Pinning from go.mod means this job builds
       # what the project declares, whatever the runner image is that week.
       - name: Setup Go
-        uses: actions/setup-go@v6
+        uses: actions/setup-go@v7
         with:
           go-version-file: ./go.mod