diff --git a/.github/workflows/jvm-native-classifiers.yml b/.github/workflows/jvm-native-classifiers.yml
index 249737f..9e85b09 100644
--- a/.github/workflows/jvm-native-classifiers.yml
+++ b/.github/workflows/jvm-native-classifiers.yml
@@ -74,7 +74,7 @@ jobs:
       # actions/checkout v5, pinned by immutable commit SHA.
       - uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09
       # actions/setup-java v5, pinned by immutable commit SHA.
-      - uses: actions/setup-java@dded0888837ed1f317902acf8a20df0ad188d165
+      - uses: actions/setup-java@dd06d9cba3e5552c54d9f8ea23572deb30010f7c
         with:
           distribution: temurin
           java-version: "17"
@@ -104,7 +104,7 @@ jobs:
       # actions/checkout v5, pinned by immutable commit SHA.
       - uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09
       # actions/setup-java v5, pinned by immutable commit SHA.
-      - uses: actions/setup-java@dded0888837ed1f317902acf8a20df0ad188d165
+      - uses: actions/setup-java@dd06d9cba3e5552c54d9f8ea23572deb30010f7c
         with:
           distribution: temurin
           java-version: "17"
diff --git a/.github/workflows/jvm-prerelease.yml b/.github/workflows/jvm-prerelease.yml
index 03bad25..6a23d08 100644
--- a/.github/workflows/jvm-prerelease.yml
+++ b/.github/workflows/jvm-prerelease.yml
@@ -56,7 +56,7 @@ jobs:
       # actions/checkout v5, pinned by immutable commit SHA.
       - uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09
       # actions/setup-java v4, pinned by immutable commit SHA.
-      - uses: actions/setup-java@cf277c60eb25467037889841efdb72551f06f6c3
+      - uses: actions/setup-java@dd06d9cba3e5552c54d9f8ea23572deb30010f7c
         with:
           distribution: temurin
           java-version: "21"
diff --git a/.github/workflows/maven-central-release.yml b/.github/workflows/maven-central-release.yml
index a82acb8..c20a01b 100644
--- a/.github/workflows/maven-central-release.yml
+++ b/.github/workflows/maven-central-release.yml
@@ -52,7 +52,7 @@ jobs:
           test "$RELEASE_TAG" = "v$release_version"
           test "$(git describe --tags --exact-match HEAD)" = "$RELEASE_TAG"
       # actions/setup-java v5, pinned by immutable commit SHA.
-      - uses: actions/setup-java@dded0888837ed1f317902acf8a20df0ad188d165
+      - uses: actions/setup-java@dd06d9cba3e5552c54d9f8ea23572deb30010f7c
         with:
           distribution: temurin
           java-version: "17"