diff --git a/.github/workflows/jvm-native-classifiers.yml b/.github/workflows/jvm-native-classifiers.yml
index 8d69f72..bf18df4 100644
--- a/.github/workflows/jvm-native-classifiers.yml
+++ b/.github/workflows/jvm-native-classifiers.yml
@@ -66,7 +66,7 @@ jobs:
       # actions/checkout v5, pinned by immutable commit SHA.
       - uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09
       # actions/setup-java v5, pinned by immutable commit SHA.
-      - uses: actions/setup-java@dded0888837ed1f317902acf8a20df0ad188d165
+      - uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961
         with:
           distribution: temurin
           java-version: "17"
@@ -96,7 +96,7 @@ jobs:
       # actions/checkout v5, pinned by immutable commit SHA.
       - uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09
       # actions/setup-java v5, pinned by immutable commit SHA.
-      - uses: actions/setup-java@dded0888837ed1f317902acf8a20df0ad188d165
+      - uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961
         with:
           distribution: temurin
           java-version: "17"
diff --git a/.github/workflows/jvm-prerelease.yml b/.github/workflows/jvm-prerelease.yml
index 03bad25..875fd4e 100644
--- a/.github/workflows/jvm-prerelease.yml
+++ b/.github/workflows/jvm-prerelease.yml
@@ -56,7 +56,7 @@ jobs:
       # actions/checkout v5, pinned by immutable commit SHA.
       - uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09
       # actions/setup-java v4, pinned by immutable commit SHA.
-      - uses: actions/setup-java@cf277c60eb25467037889841efdb72551f06f6c3
+      - uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961
         with:
           distribution: temurin
           java-version: "21"
diff --git a/.github/workflows/maven-central-release.yml b/.github/workflows/maven-central-release.yml
index d8ea523..d0e50e2 100644
--- a/.github/workflows/maven-central-release.yml
+++ b/.github/workflows/maven-central-release.yml
@@ -46,7 +46,7 @@ jobs:
           test "$RELEASE_TAG" = "v$release_version"
           test "$(git describe --tags --exact-match HEAD)" = "$RELEASE_TAG"
       # actions/setup-java v5, pinned by immutable commit SHA.
-      - uses: actions/setup-java@dded0888837ed1f317902acf8a20df0ad188d165
+      - uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961
         with:
           distribution: temurin
           java-version: "17"