diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index e2dd8ab..dea0f71 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -20,7 +20,7 @@ jobs:
         with:
           persist-credentials: false
       - name: Set up Java
-        uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
+        uses: actions/setup-java@ad2b38190b15e4d6bdf0c97fb4fca8412226d287 # v5.3.0
         with:
           distribution: 'temurin'
           java-version: '25'
@@ -34,7 +34,7 @@ jobs:
           echo "is_snapshot=$(echo "$VERSION" | grep -q SNAPSHOT && echo true || echo false)" | tee -a "$GITHUB_OUTPUT"
 
       - name: Set up Maven Central credentials for SNAPSHOT
-        uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
+        uses: actions/setup-java@ad2b38190b15e4d6bdf0c97fb4fca8412226d287 # v5.3.0
         with:
           distribution: 'temurin'
           java-version: '25'
@@ -46,7 +46,7 @@ jobs:
         if: github.event_name == 'push' && steps.version.outputs.is_snapshot == 'true'
 
       - name: Set up Maven Central credentials for release
-        uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
+        uses: actions/setup-java@ad2b38190b15e4d6bdf0c97fb4fca8412226d287 # v5.3.0
         with:
           distribution: 'temurin'
           java-version: '25'