diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 2b5cfdb3..7f00ef10 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -67,7 +67,7 @@ jobs:
         run: scripts/ci-reclaim-disk-space.sh
 
       - name: Set up Java ${{ matrix.java }}
-        uses: actions/setup-java@0f481fcb613427c0f801b606911222b5b6f3083a # v5.5.0
+        uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5.6.0
         with:
           java-version: ${{ matrix.java }}
           distribution: temurin
@@ -102,7 +102,7 @@ jobs:
         run: ./ci-reclaim-disk-space.sh
 
       - name: Set up Java ${{ matrix.java }}
-        uses: actions/setup-java@0f481fcb613427c0f801b606911222b5b6f3083a # v5.5.0
+        uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5.6.0
         with:
           java-version: ${{ matrix.java }}
           distribution: temurin
@@ -174,7 +174,7 @@ jobs:
           python-version: '3.x'
 
       - name: Setup Java 25
-        uses: actions/setup-java@0f481fcb613427c0f801b606911222b5b6f3083a # v5.5.0
+        uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5.6.0
         with:
           java-version: 25
           distribution: temurin
diff --git a/.github/workflows/dependency-submission.yml b/.github/workflows/dependency-submission.yml
index 9471049c..184de674 100644
--- a/.github/workflows/dependency-submission.yml
+++ b/.github/workflows/dependency-submission.yml
@@ -18,7 +18,7 @@ jobs:
         fetch-depth: 0
 
     - name: Setup Java
-      uses: actions/setup-java@0f481fcb613427c0f801b606911222b5b6f3083a # v5.5.0
+      uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5.6.0
       with:
         distribution: 'temurin'
         java-version: 25
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index f161de83..b6edcc8e 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -72,7 +72,7 @@ jobs:
           python-version: '3.x'
 
       - name: Setup Java 21
-        uses: actions/setup-java@0f481fcb613427c0f801b606911222b5b6f3083a # v5.5.0
+        uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5.6.0
         with:
           java-version: 21
           distribution: temurin
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 50061c36..9fedb1bb 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -77,7 +77,7 @@ jobs:
 
       - name: Setup Java
         if: steps.verify-files.outputs.should_release == 'true'
-        uses: actions/setup-java@0f481fcb613427c0f801b606911222b5b6f3083a # v5.5.0
+        uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5.6.0
         with:
           java-version: ${{ env.JAVA_VERSION }}
           distribution: temurin
diff --git a/.github/workflows/spotless.yml b/.github/workflows/spotless.yml
index 3a8863c2..046dd299 100644
--- a/.github/workflows/spotless.yml
+++ b/.github/workflows/spotless.yml
@@ -32,7 +32,7 @@ jobs:
         run: ./ci-reclaim-disk-space.sh
 
       - name: Set up Java 17
-        uses: actions/setup-java@0f481fcb613427c0f801b606911222b5b6f3083a # v5.5.0
+        uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5.6.0
         with:
           java-version: 17
           distribution: temurin
diff --git a/.github/workflows/version-tests.yml b/.github/workflows/version-tests.yml
index d88af8e2..2ea008c9 100644
--- a/.github/workflows/version-tests.yml
+++ b/.github/workflows/version-tests.yml
@@ -105,7 +105,7 @@ jobs:
           echo "EXCLUDE_TAGS_REGEX=${{ inputs.excludeTagsRegex || '^v0.*' }}" >> $GITHUB_ENV
 
       - name: Set up Java ${{ env.JAVA_VERSION }}
-        uses: actions/setup-java@0f481fcb613427c0f801b606911222b5b6f3083a # v5.5.0
+        uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5.6.0
         with:
           java-version: ${{ env.JAVA_VERSION }}
           distribution: temurin