diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index e2dd8ab..b502b17 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -20,7 +20,7 @@ jobs:
         with:
           persist-credentials: false
       - name: Set up Java
-        uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
+        uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 # v5.4.0
         with:
           distribution: 'temurin'
           java-version: '25'
@@ -34,7 +34,7 @@ jobs:
           echo "is_snapshot=$(echo "$VERSION" | grep -q SNAPSHOT && echo true || echo false)" | tee -a "$GITHUB_OUTPUT"
 
       - name: Set up Maven Central credentials for SNAPSHOT
-        uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
+        uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 # v5.4.0
         with:
           distribution: 'temurin'
           java-version: '25'
@@ -46,7 +46,7 @@ jobs:
         if: github.event_name == 'push' && steps.version.outputs.is_snapshot == 'true'
 
       - name: Set up Maven Central credentials for release
-        uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
+        uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 # v5.4.0
         with:
           distribution: 'temurin'
           java-version: '25'