diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 0f271cd..c96e805 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -37,7 +37,7 @@ jobs:
           version: 3.x
           repo-token: ${{ secrets.GITHUB_TOKEN }}
 
-      - uses: actions/setup-python@v4
+      - uses: actions/setup-python@v5
         with:
           # keep this in sync with python version from base container
           python-version: "3.12" # 3.12 is default on fedora-39
diff --git a/.github/workflows/task.yml b/.github/workflows/task.yml
index 90170dc..435756b 100644
--- a/.github/workflows/task.yml
+++ b/.github/workflows/task.yml
@@ -40,7 +40,7 @@ jobs:
           version: 3.x
           repo-token: ${{ secrets.GITHUB_TOKEN }}
 
-      - uses: actions/setup-python@v4
+      - uses: actions/setup-python@v5
         with:
           # keep this in sync with python version from base container
           python-version: "3.12" # 3.12 is default on fedora-39
diff --git a/.github/workflows/update-base.yml b/.github/workflows/update-base.yml
index baa5067..5f7f1ee 100644
--- a/.github/workflows/update-base.yml
+++ b/.github/workflows/update-base.yml
@@ -41,7 +41,7 @@ jobs:
           version: 3.x
           repo-token: ${{ secrets.GITHUB_TOKEN }}
 
-      - uses: actions/setup-python@v4
+      - uses: actions/setup-python@v5
         with:
           # keep this in sync with python version from base container
           python-version: "3.12" # 3.12 is default on fedora-39