diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml
index c4f7fb466..dc4e6c48a 100644
--- a/.github/workflows/codeql.yaml
+++ b/.github/workflows/codeql.yaml
@@ -31,11 +31,11 @@ jobs:
             build-mode: manual
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6.0.2
 
       - name: Setup Java 21
         if: matrix.language == 'java-kotlin'
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@v5.2.0
         with:
           distribution: 'temurin'
           java-version: '21'
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index a7cd3a2d1..5c9ceabd0 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -97,7 +97,7 @@ jobs:
           ref: ${{ inputs.revision == '0-SNAPSHOT' && github.ref || inputs.revision }}
 
       - name: Set up JDK & Maven Central credentials
-        uses: actions/setup-java@v5
+        uses: actions/setup-java@v5.2.0
         with:
           distribution: 'temurin'
           java-version: 21