diff --git a/.github/workflows/go-linter.yml b/.github/workflows/go-linter.yml
index a6b72e4..d211031 100644
--- a/.github/workflows/go-linter.yml
+++ b/.github/workflows/go-linter.yml
@@ -30,7 +30,7 @@ jobs:
           repository: nspcc-dev/.github
           path: nspcc-gh
 
-      - uses: actions/setup-go@v6
+      - uses: actions/setup-go@v7
         with:
           go-version-file: ${{ inputs.workdir }}/go.mod
           cache-dependency-path: ${{ inputs.workdir }}/go.sum
diff --git a/.github/workflows/upgrade-actions.yml b/.github/workflows/upgrade-actions.yml
index 623ba24..0d23682 100644
--- a/.github/workflows/upgrade-actions.yml
+++ b/.github/workflows/upgrade-actions.yml
@@ -28,10 +28,10 @@ jobs:
         repo: ${{ fromJson(needs.define-matrix.outputs.repos) }}
     steps:
       - name: Clone repo
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
         with:
-          repository: https://github.com/nspcc-dev/${{matrix.repo}}.git
-          token: ${{ GH_TOKEN }}
+          repository: nspcc-dev/${{matrix.repo}}
+          token: ${{ secrets.SAMI_GHACTION_UPGRADE_TOKEN }}
 
       - name: Checkout upgrade-actions branch
         run: git checkout -b upgrade-actions || git checkout upgrade-actions