diff --git a/.github/workflows/manual-build.yml b/.github/workflows/manual-build.yml
index 4368e5f..255d81f 100644
--- a/.github/workflows/manual-build.yml
+++ b/.github/workflows/manual-build.yml
@@ -43,7 +43,7 @@ jobs:
         run: ./scripts/apply-patches.sh "$UPSTREAM_TAG"
 
       - name: Set up JDK
-        uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5.6.0
+        uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5.7.0
         with:
           distribution: 'temurin'
           java-version: '25'
diff --git a/.github/workflows/sync.yml b/.github/workflows/sync.yml
index 9a95cf8..aed32d1 100644
--- a/.github/workflows/sync.yml
+++ b/.github/workflows/sync.yml
@@ -62,7 +62,7 @@ jobs:
 
       - name: Set up JDK
         if: steps.detect.outputs.should_sync == 'true'
-        uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5.6.0
+        uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5.7.0
         with:
           distribution: 'temurin'
           java-version: '25'