diff --git a/.github/workflows/build-mo.yaml b/.github/workflows/build-mo.yaml
index a677098..26d9c82 100644
--- a/.github/workflows/build-mo.yaml
+++ b/.github/workflows/build-mo.yaml
@@ -201,7 +201,7 @@ jobs:
       # bypassing their local Maven build.
       - name: Set up JDK 17 for jstfu
         if: ${{ steps.jstfu-contract.outputs.enabled == 'true' }}
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@v6
         with:
           distribution: temurin
           java-version: "17"
diff --git a/.github/workflows/race-seed-sample.yaml b/.github/workflows/race-seed-sample.yaml
index 862b486..d6fbc56 100644
--- a/.github/workflows/race-seed-sample.yaml
+++ b/.github/workflows/race-seed-sample.yaml
@@ -67,7 +67,7 @@ jobs:
         with:
           go-version-file: go.mod
           cache: false
-      - uses: actions/setup-java@cf277c60eb25467037889841efdb72551f06f6c3 # v4
+      - uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6 # v6.0.1
         with:
           distribution: adopt
           java-version: '8'