diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index d295c122b..d539a1273 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -38,7 +38,7 @@ jobs:
     - id: setup-java-deploy
       name: Set up JDK 11 (deploy)
       if: ${{ env.BUILD_SNAPSHOT == 'true' }}
-      uses: actions/setup-java@cd89f46ac9d01407894225f350157564c9c7cee2
+      uses: actions/setup-java@0ab4596768b603586c0de567f2430c30f5b0d2b0
       with:
         java-version: 11
         distribution: 'temurin'
@@ -50,7 +50,7 @@ jobs:
         gpg-passphrase: MAVEN_GPG_PASSPHRASE # env variable for GPG private key passphrase
     - name: Set up JDK 11 (build only)
       if:  ${{ steps.setup-java-deploy.outcome == 'skipped' }}
-      uses: actions/setup-java@5ffc13f4174014e2d4d4572b3d74c3fa61aeb2c2
+      uses: actions/setup-java@0ab4596768b603586c0de567f2430c30f5b0d2b0
       with:
         java-version: 11
         distribution: 'temurin'
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index f0f18e8aa..cf1ebd889 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -24,7 +24,7 @@ jobs:
       with:
         maven-version: 3.9.3
     - name: Set up JDK 11
-      uses: actions/setup-java@cd89f46ac9d01407894225f350157564c9c7cee2
+      uses: actions/setup-java@0ab4596768b603586c0de567f2430c30f5b0d2b0
       with:
         java-version: 11
         distribution: 'temurin'