diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 053636d..6f45012 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -10,7 +10,7 @@ jobs:
     steps:
       - uses: actions/checkout@v4
 
-      - uses: actions/setup-java@v4
+      - uses: actions/setup-java@v5
         with:
           distribution: temurin
           java-version: '17'
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 9091a51..7d5fe15 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -15,7 +15,7 @@ jobs:
       # setup-java references from the generated settings.xml `central` server
       # entry; the values are injected on the deploy step below. The GPG
       # private key is imported into the runner's keyring here.
-      - uses: actions/setup-java@v4
+      - uses: actions/setup-java@v5
         with:
           distribution: temurin
           java-version: "17"