diff --git a/.github/workflows/pr-checks.yaml b/.github/workflows/pr-checks.yaml
index 6526130..c9d5f57 100644
--- a/.github/workflows/pr-checks.yaml
+++ b/.github/workflows/pr-checks.yaml
@@ -23,7 +23,7 @@ jobs:
           distribution: 'temurin'
 
       - name: Setup Gradle
-        uses: gradle/actions/setup-gradle@af1da67850ed9a4cedd57bfd976089dd991e2582 # v4.0.0
+        uses: gradle/actions/setup-gradle@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0
 
       - name: Test
         run: ./gradlew :backend:plugin:test
diff --git a/.github/workflows/publish-backend.yaml b/.github/workflows/publish-backend.yaml
index cba0bd3..ae1bad3 100644
--- a/.github/workflows/publish-backend.yaml
+++ b/.github/workflows/publish-backend.yaml
@@ -72,7 +72,7 @@ jobs:
       # Configure Gradle for optimal use in GitHub Actions, including caching of downloaded dependencies.
       # See: https://github.com/gradle/actions/blob/main/setup-gradle/README.md
       - name: Setup Gradle
-        uses: gradle/actions/setup-gradle@af1da67850ed9a4cedd57bfd976089dd991e2582 # v4.0.0
+        uses: gradle/actions/setup-gradle@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0
 
       # CHANGED_DIR (matrix.value / step outputs derived from it) is directory-name content from
       # the changed-files diff — never interpolate it directly into a `run:` script with ${{ }},