diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index fc1dee5..da0d535 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -35,7 +35,7 @@ jobs:
           test -n "$PACKAGES_TOKEN" \
             || { echo "Missing secret HAUNTEDMC_PACKAGES_TOKEN (requires read:packages)." >&2; exit 1; }
       - name: Set up JDK 25
-        uses: actions/setup-java@dd06d9cba3e5552c54d9f8ea23572deb30010f7c # v6.0.0
+        uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6 # v6.0.1
         with:
           distribution: temurin
           java-version: "25"
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 87a72e0..3f0f2da 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -35,7 +35,7 @@ jobs:
           test -n "$PACKAGES_TOKEN" \
             || { echo "Missing secret HAUNTEDMC_PACKAGES_TOKEN (read/write packages required)." >&2; exit 1; }
       - name: Set up JDK 25
-        uses: actions/setup-java@dd06d9cba3e5552c54d9f8ea23572deb30010f7c # v6.0.0
+        uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6 # v6.0.1
         with:
           distribution: temurin
           java-version: "25"