diff --git a/.github/workflows/checks.yml b/.github/workflows/checks.yml
index 240586c..66721ca 100644
--- a/.github/workflows/checks.yml
+++ b/.github/workflows/checks.yml
@@ -189,7 +189,7 @@ jobs:
       # openapi-generator runs via `pnpm dlx` (pnpm is set up above) but is a
       # Java program, so a JDK must be on PATH. Dart runs build_runner, format,
       # analyze and the publish dry run.
-      - uses: actions/setup-java@v5.6.0
+      - uses: actions/setup-java@v5.7.0
         with:
           distribution: temurin
           java-version: "21"
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 4767e77..ccae425 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -160,7 +160,7 @@ jobs:
       # its stamped pubspec. That runs openapi-generator via `pnpm dlx` and then
       # build_runner, which needs a JDK on PATH and Dart; dlx fetches and
       # version-pins the generator itself, so nothing else installs.
-      - uses: actions/setup-java@v5.6.0
+      - uses: actions/setup-java@v5.7.0
         with:
           distribution: temurin
           java-version: "21"