diff --git a/.github/workflows/previews-shared-deploy.yml b/.github/workflows/previews-shared-deploy.yml
index 4193784b..c53805fc 100644
--- a/.github/workflows/previews-shared-deploy.yml
+++ b/.github/workflows/previews-shared-deploy.yml
@@ -147,7 +147,7 @@ jobs:
           true
 
       - name: Deploy
-        uses: pulumi/actions@8582a9e8cc630786854029b4e09281acd6794b58 # v6
+        uses: pulumi/actions@8e5e406f4007fca908480587cb9893c07090f58d # v7.0.0
         with:
           command: up
           stack-name: ${{ inputs.stack_name || 'previews-shared' }}
diff --git a/.github/workflows/stack-deploy.yml b/.github/workflows/stack-deploy.yml
index 4063e8ae..c1a9a7db 100644
--- a/.github/workflows/stack-deploy.yml
+++ b/.github/workflows/stack-deploy.yml
@@ -201,7 +201,7 @@ jobs:
           true
 
       - name: Deploy
-        uses: pulumi/actions@8582a9e8cc630786854029b4e09281acd6794b58 # v6
+        uses: pulumi/actions@8e5e406f4007fca908480587cb9893c07090f58d # v7.0.0
         with:
           command: up
           stack-name: ${{ inputs.stack_name }}
@@ -240,7 +240,7 @@ jobs:
         run: bun install --frozen-lockfile
 
       - name: Destroy
-        uses: pulumi/actions@8582a9e8cc630786854029b4e09281acd6794b58 # v6
+        uses: pulumi/actions@8e5e406f4007fca908480587cb9893c07090f58d # v7.0.0
         with:
           command: destroy
           stack-name: ${{ inputs.stack_name }}