diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index bd658b32c43..1fe23f0a77b 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -90,9 +90,9 @@ jobs:
         distribution: 'temurin'
         cache: maven
     - name: Set up Maven
-      uses: stCarolas/setup-maven@v5
+      uses: stCarolas/setup-maven@12eb41b233df95d49b0c11fc1b5bc8312e5d4ce0 # v5.1
       with:
-        maven-version: 3.9.14
+        maven-version: 3.9.16
     - name: Build
       env:
         GTK_XCFLAGS: '-Wno-deprecated-declarations'
diff --git a/.github/workflows/copilot-setup-steps.yml b/.github/workflows/copilot-setup-steps.yml
index 62465180250..ad8320330c4 100644
--- a/.github/workflows/copilot-setup-steps.yml
+++ b/.github/workflows/copilot-setup-steps.yml
@@ -28,7 +28,7 @@ jobs:
       - name: Set up Maven
         uses: stCarolas/setup-maven@12eb41b233df95d49b0c11fc1b5bc8312e5d4ce0 # v5.1
         with:
-          maven-version: '3.9.14'
+          maven-version: '3.9.16'
       - name: Install SWT Linux Build Dependencies
         run: |
           sudo apt-get update -qq 
diff --git a/.github/workflows/maven.yml b/.github/workflows/maven.yml
index c34020b35c2..181a94f2e32 100644
--- a/.github/workflows/maven.yml
+++ b/.github/workflows/maven.yml
@@ -45,11 +45,7 @@ jobs:
     steps:
       - name: Paths filter (PRs only)
         if: github.event.pull_request.base
-        # dorney/paths-filter is out of date, so use this fork with
-        # a specific fix for missing predicate-quantifier in action's
-        # inputs
-        # https://github.com/dorny/paths-filter/pull/226#issuecomment-2805358761
-        uses: petermetz/paths-filter@5ee2f5d4cf5d7bdd998a314a42da307e2ae1639d
+        uses: dorny/paths-filter@fbd0ab8f3e69293af611ebaee6363fc25e6d187d # v4.0.1
         id: filter
         with:
           predicate-quantifier: 'every'
diff --git a/.mvn/extensions.xml b/.mvn/extensions.xml
index a10e798528a..c7960ee10a2 100644
--- a/.mvn/extensions.xml
+++ b/.mvn/extensions.xml
@@ -4,6 +4,6 @@
 	<extension>
 		<groupId>org.eclipse.tycho</groupId>
 		<artifactId>tycho-build</artifactId>
-		<version>5.0.2</version>
+		<version>5.0.3</version>
 	</extension>
 </extensions>
\ No newline at end of file