diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 1f2da25..9b75ae1 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -18,7 +18,7 @@ jobs:
       # 1.21.x targets compile against Java 21, 26.x targets against Java 25.
       # Both toolchains have to be present for the whole matrix to build in one pass.
       - name: setup jdks
-        uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5.7.0
+        uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6 # v6.0.1
         with:
           java-version: |
             17
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 4183754..aa3eea0 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -35,7 +35,7 @@ jobs:
         uses: gradle/actions/wrapper-validation@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0
 
       - name: setup jdks
-        uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5.7.0
+        uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6 # v6.0.1
         with:
           java-version: |
             17