diff --git a/.github/workflows/pr-feedback.yml b/.github/workflows/pr-feedback.yml
index 6ef51dc..38bfe84 100644
--- a/.github/workflows/pr-feedback.yml
+++ b/.github/workflows/pr-feedback.yml
@@ -36,7 +36,7 @@ jobs:
           blocklist=$(curl https://raw.githubusercontent.com/nextcloud/.github/master/non-community-usernames.txt | paste -s -d, -)
           echo "blocklist=$blocklist" >> "$GITHUB_OUTPUT"
 
-      - uses: nextcloud/pr-feedback-action@c8c97a6b11ff6379e629a8fbde09572730cacec9 # main
+      - uses: nextcloud/pr-feedback-action@4709fa5b3e1821559d4c312ef937b61f1567aa44 # main
         with:
           feedback-message: |
             Hello there,
diff --git a/config/workflows/analysis.yml b/config/workflows/analysis.yml
index 2a3612f..887d979 100644
--- a/config/workflows/analysis.yml
+++ b/config/workflows/analysis.yml
@@ -57,7 +57,7 @@ jobs:
                     repository: ${{ steps.get-vars.outputs.repo }}
                     ref: ${{ steps.get-vars.outputs.branch }}
             -   name: Set up JDK 21
-                uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 # v5.4.0
+                uses: actions/setup-java@0f481fcb613427c0f801b606911222b5b6f3083a # v5.5.0
                 with:
                     distribution: "temurin"
                     java-version: 21
diff --git a/config/workflows/codeql.yml b/config/workflows/codeql.yml
index 686d2e9..2b2313c 100644
--- a/config/workflows/codeql.yml
+++ b/config/workflows/codeql.yml
@@ -47,7 +47,7 @@ jobs:
         with:
           languages: ${{ matrix.language }}
       - name: Set up JDK 21
-        uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 # v5.4.0
+        uses: actions/setup-java@0f481fcb613427c0f801b606911222b5b6f3083a # v5.5.0
         with:
           distribution: "temurin"
           java-version: 21
diff --git a/config/workflows/pr-feedback.yml b/config/workflows/pr-feedback.yml
index 6ef51dc..38bfe84 100644
--- a/config/workflows/pr-feedback.yml
+++ b/config/workflows/pr-feedback.yml
@@ -36,7 +36,7 @@ jobs:
           blocklist=$(curl https://raw.githubusercontent.com/nextcloud/.github/master/non-community-usernames.txt | paste -s -d, -)
           echo "blocklist=$blocklist" >> "$GITHUB_OUTPUT"
 
-      - uses: nextcloud/pr-feedback-action@c8c97a6b11ff6379e629a8fbde09572730cacec9 # main
+      - uses: nextcloud/pr-feedback-action@4709fa5b3e1821559d4c312ef937b61f1567aa44 # main
         with:
           feedback-message: |
             Hello there,
diff --git a/config/workflows/qa.yml b/config/workflows/qa.yml
index 263977d..d67ecbc 100644
--- a/config/workflows/qa.yml
+++ b/config/workflows/qa.yml
@@ -30,7 +30,7 @@ jobs:
           persist-credentials: false
 
       - name: set up JDK 21
-        uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 # v5.4.0
+        uses: actions/setup-java@0f481fcb613427c0f801b606911222b5b6f3083a # v5.5.0
         if: ${{ steps.check-secrets.outputs.ok == 'true' }}
         with:
           distribution: "temurin"