diff --git a/.github/workflows/publish-maven-central.yml b/.github/workflows/publish-maven-central.yml
index 67deb1213..631f661ae 100644
--- a/.github/workflows/publish-maven-central.yml
+++ b/.github/workflows/publish-maven-central.yml
@@ -36,7 +36,7 @@ jobs:
     # 2. Running the nmcp plugin (requires Java 17+)
     # Note: TestNG artifacts still target Java 11 (targetJavaVersion=11)
     - name: Set up JDK 25
-      uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5
+      uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5
       with:
         distribution: 'temurin'
         java-version: 25
diff --git a/.github/workflows/publish-snapshot.yml b/.github/workflows/publish-snapshot.yml
index 0d660a769..2d11e73ba 100644
--- a/.github/workflows/publish-snapshot.yml
+++ b/.github/workflows/publish-snapshot.yml
@@ -22,7 +22,7 @@ jobs:
     # 2. Running the nmcp plugin (requires Java 17+)
     # Note: TestNG artifacts still target Java 11 (targetJavaVersion=11)
     - name: Set up JDK 25
-      uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5
+      uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5
       with:
         distribution: 'temurin'
         java-version: 25
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 2ce9c0f1e..737423f9a 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -48,7 +48,7 @@ jobs:
           persist-credentials: false
           fetch-depth: 1
       - name: Set up Java 25
-        uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5
+        uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5
         with:
           java-version: 25
           distribution: temurin
@@ -112,7 +112,7 @@ jobs:
           website: ${{ matrix.oracle_java_website }}
           release: ${{ matrix.java_version }}
       - name: Set up Java ${{ matrix.non_ea_java_version }} (test) and 25 (Gradle + build), ${{ matrix.java_distribution }}
-        uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5
+        uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5
         with:
           # Install multiple Java versions:
           # - Test version (11, 17, 21, 25, or 26): used to run TestNG tests