diff --git a/.github/actions/setup-java-gradle/action.yml b/.github/actions/setup-java-gradle/action.yml
index 4e5977b..f48ed2b 100644
--- a/.github/actions/setup-java-gradle/action.yml
+++ b/.github/actions/setup-java-gradle/action.yml
@@ -26,14 +26,14 @@ runs:
   steps:
     # A poisoned wrapper jar runs arbitrary code with the job's token, so this comes before Gradle.
     - if: inputs.validate-wrapper == 'true'
-      uses: gradle/actions/wrapper-validation@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0
+      uses: gradle/actions/wrapper-validation@3f5f9adaf7d9fecd50b5935e54106014257a94e6 # v6.4.0
 
     - uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6 # v6.0.1
       with:
         java-version: ${{ inputs.java-version }}
         distribution: ${{ inputs.java-distribution }}
 
-    - uses: gradle/actions/setup-gradle@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0
+    - uses: gradle/actions/setup-gradle@3f5f9adaf7d9fecd50b5935e54106014257a94e6 # v6.4.0
       with:
         cache-read-only: ${{ inputs.cache-read-only != '' && inputs.cache-read-only || (github.ref != format('refs/heads/{0}', github.event.repository.default_branch)) }}
         # Dependency locking and checksum verification are the project's job; this only reports.