diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index c13cf2994..9f296d34e 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -24,7 +24,7 @@ jobs:
       - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
 
       - name: Setup for Java build
-        uses: actions/setup-java@0ab4596768b603586c0de567f2430c30f5b0d2b0 # v3.13.0
+        uses: actions/setup-java@99b8673ff64fbf99d8d325f52d9a5bdedb8483e9 # v4.2.1
         with:
           java-version: 11
           java-package: jdk
@@ -42,7 +42,7 @@ jobs:
           echo "::set-output name=version::$VERSION"
 
       - name: Setup Java for deploy
-        uses: actions/setup-java@0ab4596768b603586c0de567f2430c30f5b0d2b0 # v3.13.0
+        uses: actions/setup-java@99b8673ff64fbf99d8d325f52d9a5bdedb8483e9 # v4.2.1
         with: # running setup-java again overwrites the settings.xml
           java-version: 11
           java-package: jdk
diff --git a/.github/workflows/jreleaser.yml b/.github/workflows/jreleaser.yml
index bf7b4c993..432abc624 100644
--- a/.github/workflows/jreleaser.yml
+++ b/.github/workflows/jreleaser.yml
@@ -25,7 +25,7 @@ jobs:
         with:
           fetch-depth: 0
       - name: Set up JDK 11
-        uses: actions/setup-java@5ffc13f4174014e2d4d4572b3d74c3fa61aeb2c2 # v3
+        uses: actions/setup-java@99b8673ff64fbf99d8d325f52d9a5bdedb8483e9 # v4
         with:
           java-version: '11'
           distribution: 'adopt'
diff --git a/.github/workflows/support.yml b/.github/workflows/support.yml
index 30d789a5d..393519ea1 100644
--- a/.github/workflows/support.yml
+++ b/.github/workflows/support.yml
@@ -52,7 +52,7 @@ jobs:
             --gh-repository   ${{ github.repository }} \
             --gh-workflow     ${{ github.workflow }}
 
-      - uses: actions/setup-java@0ab4596768b603586c0de567f2430c30f5b0d2b0 # v3.13.0
+      - uses: actions/setup-java@99b8673ff64fbf99d8d325f52d9a5bdedb8483e9 # v4.2.1
         with:
           java-version: 11
           java-package: jdk
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index 4757fba4a..2b2715d8e 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -31,7 +31,7 @@ jobs:
       - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
         with:
           fetch-depth: 0  # SonarCloud prefers non-shallow clones
-      - uses: actions/setup-java@0ab4596768b603586c0de567f2430c30f5b0d2b0 # v3.13.0
+      - uses: actions/setup-java@99b8673ff64fbf99d8d325f52d9a5bdedb8483e9 # v4.2.1
         with:
           java-version: 11
           java-package: jdk
@@ -81,7 +81,7 @@ jobs:
         with:
           python-version: '3.10.12'
           update-environment: false
-      - uses: actions/setup-java@0ab4596768b603586c0de567f2430c30f5b0d2b0 # v3.13.0
+      - uses: actions/setup-java@99b8673ff64fbf99d8d325f52d9a5bdedb8483e9 # v4.2.1
         with:
           java-version: 11
           java-package: jdk
@@ -113,7 +113,7 @@ jobs:
 
     steps:
       - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
-      - uses: actions/setup-java@0ab4596768b603586c0de567f2430c30f5b0d2b0 # v3.13.0
+      - uses: actions/setup-java@99b8673ff64fbf99d8d325f52d9a5bdedb8483e9 # v4.2.1
         with:
           java-version: 11
           java-package: jdk