diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 961fc83..4a27f4e 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -67,7 +67,7 @@ jobs:
         run: scripts/ci-reclaim-disk-space.sh
 
       - name: Set up Java ${{ matrix.java }}
-        uses: actions/setup-java@ad2b38190b15e4d6bdf0c97fb4fca8412226d287 # v5.3.0
+        uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 # v5.4.0
         with:
           java-version: ${{ matrix.java }}
           distribution: temurin
@@ -102,7 +102,7 @@ jobs:
         run: ./ci-reclaim-disk-space.sh
 
       - name: Set up Java ${{ matrix.java }}
-        uses: actions/setup-java@ad2b38190b15e4d6bdf0c97fb4fca8412226d287 # v5.3.0
+        uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 # v5.4.0
         with:
           java-version: ${{ matrix.java }}
           distribution: temurin
@@ -174,7 +174,7 @@ jobs:
           python-version: '3.x'
 
       - name: Setup Java 25
-        uses: actions/setup-java@ad2b38190b15e4d6bdf0c97fb4fca8412226d287 # v5.3.0
+        uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 # v5.4.0
         with:
           java-version: 25
           distribution: temurin
diff --git a/.github/workflows/dependency-submission.yml b/.github/workflows/dependency-submission.yml
index 14cfeff..9bbb76a 100644
--- a/.github/workflows/dependency-submission.yml
+++ b/.github/workflows/dependency-submission.yml
@@ -18,7 +18,7 @@ jobs:
         fetch-depth: 0
 
     - name: Setup Java
-      uses: actions/setup-java@ad2b38190b15e4d6bdf0c97fb4fca8412226d287 # v5.3.0
+      uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 # v5.4.0
       with:
         distribution: 'temurin'
         java-version: 25
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index cc76f02..5e88535 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -72,7 +72,7 @@ jobs:
           python-version: '3.x'
 
       - name: Setup Java 21
-        uses: actions/setup-java@ad2b38190b15e4d6bdf0c97fb4fca8412226d287 # v5.3.0
+        uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 # v5.4.0
         with:
           java-version: 21
           distribution: temurin
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 4029381..d8c6340 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -77,7 +77,7 @@ jobs:
 
       - name: Setup Java
         if: steps.verify-files.outputs.should_release == 'true'
-        uses: actions/setup-java@ad2b38190b15e4d6bdf0c97fb4fca8412226d287 # v5.3.0
+        uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 # v5.4.0
         with:
           java-version: ${{ env.JAVA_VERSION }}
           distribution: temurin
diff --git a/.github/workflows/spotless.yml b/.github/workflows/spotless.yml
index e160b23..57ed304 100644
--- a/.github/workflows/spotless.yml
+++ b/.github/workflows/spotless.yml
@@ -32,7 +32,7 @@ jobs:
         run: ./ci-reclaim-disk-space.sh
 
       - name: Set up Java 17
-        uses: actions/setup-java@ad2b38190b15e4d6bdf0c97fb4fca8412226d287 # v5.3.0
+        uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 # v5.4.0
         with:
           java-version: 17
           distribution: temurin
diff --git a/.github/workflows/version-tests.yml b/.github/workflows/version-tests.yml
index 603d3a6..cc90323 100644
--- a/.github/workflows/version-tests.yml
+++ b/.github/workflows/version-tests.yml
@@ -106,7 +106,7 @@ jobs:
           echo "EXCLUDE_TAGS_REGEX=${{ inputs.excludeTagsRegex || '^v0.*' }}" >> $GITHUB_ENV
 
       - name: Set up Java ${{ env.JAVA_VERSION }}
-        uses: actions/setup-java@ad2b38190b15e4d6bdf0c97fb4fca8412226d287 # v5.3.0
+        uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 # v5.4.0
         with:
           java-version: ${{ env.JAVA_VERSION }}
           distribution: temurin