diff --git a/.github/workflows/python-package.yml b/.github/workflows/python-package.yml
index 52e2e9c81..72ff216c9 100644
--- a/.github/workflows/python-package.yml
+++ b/.github/workflows/python-package.yml
@@ -24,7 +24,7 @@ jobs:
     steps:
     - uses: actions/checkout@v4.2.2
     - name: Set up Python ${{ matrix.python-version }}
-      uses: actions/setup-python@v5.2.0
+      uses: actions/setup-python@v5.6.0
       with:
         python-version: ${{ matrix.python-version }}
 
diff --git a/CHANGES.rst b/CHANGES.rst
index 4ca8f4171..9376ad448 100644
--- a/CHANGES.rst
+++ b/CHANGES.rst
@@ -6,7 +6,7 @@ fixes:
 - docs: add unreleased section (#1681)
 - fix: check only activate plugins listed in CORE_PLUGINS (#1601)
 - chore: bump jinja to 3.1.3 (#1684)
-- chore: bump actions/setup-python version (#1686, #1700)
+- chore: bump actions/setup-python version (#1686, #1700, #1708)
 - chore: bump actions/checkout version (#1696, #1704)
 - chore: optimize Dockerfile (#1679)
 - docs: fix telegram install command (#1697)