diff --git a/.github/workflows/sonar.yml b/.github/workflows/sonar.yml
index 085c4edc..9086e565 100644
--- a/.github/workflows/sonar.yml
+++ b/.github/workflows/sonar.yml
@@ -47,7 +47,7 @@ jobs:
 
       - name: Setup Java
         # The SonarScanner for .NET runs on the JVM; SonarQube Cloud requires Java 17+.
-        uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5
+        uses: actions/setup-java@dd06d9cba3e5552c54d9f8ea23572deb30010f7c # v6.0.0
         with:
           distribution: temurin
           java-version: '17'