diff --git a/.github/workflows/pr-checks.yml b/.github/workflows/pr-checks.yml
index f2da6b9e0..426af2690 100644
--- a/.github/workflows/pr-checks.yml
+++ b/.github/workflows/pr-checks.yml
@@ -8,7 +8,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
-    - uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018
+    - uses: actions/setup-java@2dfa2011c5b2a0f1489bf9e433881c92c1631f88
       with:
         distribution: 'temurin'
         java-version: 8
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 8da40c49b..89ba63d15 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -20,7 +20,7 @@ jobs:
     steps:
     - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
     - name: setup java
-      uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018 # tag=v3
+      uses: actions/setup-java@2dfa2011c5b2a0f1489bf9e433881c92c1631f88 # tag=v3
       with:
         distribution: 'temurin'
         java-version: 8
@@ -43,7 +43,7 @@ jobs:
     environment: snapshots
     steps:
     - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
-    - uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018 # tag=v3
+    - uses: actions/setup-java@2dfa2011c5b2a0f1489bf9e433881c92c1631f88 # tag=v3
       with:
         distribution: 'temurin'
         java-version: 8
@@ -63,7 +63,7 @@ jobs:
     environment: releases
     steps:
     - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
-    - uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018 # tag=v3
+    - uses: actions/setup-java@2dfa2011c5b2a0f1489bf9e433881c92c1631f88 # tag=v3
       with:
         distribution: 'temurin'
         java-version: 8
@@ -85,7 +85,7 @@ jobs:
     environment: releases
     steps:
     - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
-    - uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018 # tag=v3
+    - uses: actions/setup-java@2dfa2011c5b2a0f1489bf9e433881c92c1631f88 # tag=v3
       with:
         distribution: 'temurin'
         java-version: 8