diff --git a/.github/workflows/manual-build.yml b/.github/workflows/manual-build.yml
index 5413306..ba7d844 100644
--- a/.github/workflows/manual-build.yml
+++ b/.github/workflows/manual-build.yml
@@ -38,7 +38,7 @@ jobs:
         run: ./scripts/apply-patches.sh "$UPSTREAM_TAG"
 
       - name: Set up JDK
-        uses: actions/setup-java@ad2b38190b15e4d6bdf0c97fb4fca8412226d287 # v5.3.0
+        uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 # v5.4.0
         with:
           distribution: 'temurin'
           java-version: '21'
diff --git a/.github/workflows/sync.yml b/.github/workflows/sync.yml
index 2c4c1d1..a489c57 100644
--- a/.github/workflows/sync.yml
+++ b/.github/workflows/sync.yml
@@ -62,7 +62,7 @@ jobs:
 
       - name: Set up JDK
         if: steps.detect.outputs.should_sync == 'true'
-        uses: actions/setup-java@ad2b38190b15e4d6bdf0c97fb4fca8412226d287 # v5.3.0
+        uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 # v5.4.0
         with:
           distribution: 'temurin'
           java-version: '21'