diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index a23360555..932ea045c 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -1,5 +1,8 @@
 name: Build
 
+env:
+  GRAALCE_JDK_VERSION: "17.0.9"
+
 on:
   push:
     branches:
@@ -7,30 +10,70 @@ on:
   pull_request:
 
 jobs:
-  build:
+  libs:
+    name: test and build libs
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
-        with:
-          fetch-depth: 0
-      - name: Set up JDK 8
-        uses: actions/setup-java@v2
+        uses: actions/checkout@v4
+
+      - name: Set up JDK 8 and 17 # we need both because graal plugin in cli-bot requires jdk version >= 11
+        uses: actions/setup-java@v4
         with:
-          java-version: '8'
-          distribution: 'adopt'
+          java-version: |
+            8
+            17
+          distribution: 'temurin'
+
       - name: Gradle Wrapper Validation
         uses: gradle/wrapper-validation-action@v1.0.4
+
       - name: Grant execute permission for gradlew
         run: chmod +x gradlew
+
       - name: Build with Gradle
-        run: ./gradlew clean test integrationTest build nativeCompile
+        run: ./gradlew clean test integrationTest build shadowJar
+
+  cli:
+    name: build and test native image
+    runs-on: ubuntu-latest
+    needs: libs
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      # loosely based on https://github.com/actions/setup-java/blob/main/docs/advanced-usage.md#installing-java-from-local-file
+      - name: Fetch latest graalce JDK
+        id: fetch_latest_jdk
+        run: |
+          jdk_version="{{ env.GRAALCE_JDK_VERSION }}"
+          cd $RUNNER_TEMP
+          latest_jdk_download_url="https://github.com/graalvm/graalvm-ce-builds/releases/download/jdk-${jdk_version}/graalvm-community-jdk-${jdk_version}_linux-x64_bin.tar.gz"
+          echo $latest_jdk_download_url
+          curl -Ls "$latest_jdk_download_url" -o java_package.tar.gz
+          echo "$jdk_version" >> "$GITHUB_OUTPUT"
+
+      - name: Set up GraalCE JDK
+        uses: actions/setup-java@v4
+        with:
+          distribution: 'jdkfile'
+          jdkFile: ${{ runner.temp }}/java_package.tar.gz
+          java-version: ${{ steps.fetch_latest_jdk.outputs.jdk_version }}
+          architecture: x64
+
+      - name: Gradle Wrapper Validation
+        uses: gradle/wrapper-validation-action@v1.0.4
+
+      - name: Grant execute permission for gradlew
+        run: chmod +x gradlew
+
+      - name: Compile native image
+        run: ./gradlew nativeCompile
       - name: Test native image
         run: |
           # run several iterations to test various pathways when generating data
           for i in {0..10}; do
-            ./cli-bot/build/native/nativeCompile/faker-bot  list --verbose >/dev/null || false
-            ./cli-bot/build/native/nativeCompile/faker-bot  lookup a --verbose >/dev/null || false
+            ./cli-bot/build/native/nativeCompile/faker-bot list --verbose >/dev/null || false
+            ./cli-bot/build/native/nativeCompile/faker-bot lookup a --verbose >/dev/null || false
           done
 
-
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index 0e3a1470f..0a7c4024e 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -40,14 +40,12 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
-        with:
-          fetch-depth: 0
+        uses: actions/checkout@v4
       - name: Set up JDK 8
-        uses: actions/setup-java@v2
+        uses: actions/setup-java@v4
         with:
           java-version: '8'
-          distribution: 'adopt'
+          distribution: 'temurin'
       - name: Deploy Docs
         run: make deploy-docs
         env:
diff --git a/.github/workflows/publish_snapshot.yml b/.github/workflows/publish_snapshot.yml
index a1ac3a141..b3b94c996 100644
--- a/.github/workflows/publish_snapshot.yml
+++ b/.github/workflows/publish_snapshot.yml
@@ -1,5 +1,8 @@
 name: Publish Snapshot
 
+env:
+  GRAALCE_JDK_VERSION: 17.0.9
+
 on:
   push:
     branches:
@@ -28,14 +31,31 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
+      # loosely based on https://github.com/actions/setup-java/blob/main/docs/advanced-usage.md#installing-java-from-local-file
+      - name: Fetch latest graalce JDK
+        id: fetch_latest_jdk
+        run: |
+          jdk_version=${{ env.GRAALCE_JDK_VERSION }}
+          cd $RUNNER_TEMP
+          latest_jdk_download_url="https://github.com/graalvm/graalvm-ce-builds/releases/download/jdk-${jdk_version}/graalvm-community-jdk-${jdk_version}_linux-x64_bin.tar.gz"
+          echo "$latest_jdk_download_url"
+          curl -Ls "$latest_jdk_download_url" -o java_package.tar.gz
+          echo "$jdk_version" >> "$GITHUB_OUTPUT"
+      - name: Set up GraalCE JDK
+        uses: actions/setup-java@v4
         with:
-          fetch-depth: 0
+          distribution: 'jdkfile'
+          jdkFile: ${{ runner.temp }}/java_package.tar.gz
+          java-version: ${{ steps.fetch_latest_jdk.outputs.jdk_version }}
+          architecture: x64
       - name: Set up JDK 8
-        uses: actions/setup-java@v2
+        uses: actions/setup-java@v4
         with:
-          java-version: '8'
-          distribution: 'adopt'
+          java-version: |
+            8
+            17
+          distribution: 'temurin'
       - name: Gradle Wrapper Validation
         uses: gradle/wrapper-validation-action@v1.0.4
       - name: Grant execute permission to scripts