diff --git a/.github/workflows/pr-checks.yml b/.github/workflows/pr-checks.yml
index 3c756eb58..09c9c613b 100644
--- a/.github/workflows/pr-checks.yml
+++ b/.github/workflows/pr-checks.yml
@@ -8,7 +8,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
-    - uses: actions/setup-java@b36c23c0d998641eff861008f374ee103c25ac73
+    - uses: actions/setup-java@8df1039502a15bceb9433410b1a100fbe190c53b
       with:
         distribution: 'temurin'
         java-version: 8
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 7057044de..ce759abbd 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -20,7 +20,7 @@ jobs:
     steps:
     - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
     - name: setup java
-      uses: actions/setup-java@b36c23c0d998641eff861008f374ee103c25ac73 # tag=v3
+      uses: actions/setup-java@8df1039502a15bceb9433410b1a100fbe190c53b # tag=v3
       with:
         distribution: 'temurin'
         java-version: 8
@@ -43,7 +43,7 @@ jobs:
     environment: snapshots
     steps:
     - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
-    - uses: actions/setup-java@b36c23c0d998641eff861008f374ee103c25ac73 # tag=v3
+    - uses: actions/setup-java@8df1039502a15bceb9433410b1a100fbe190c53b # tag=v3
       with:
         distribution: 'temurin'
         java-version: 8
@@ -63,7 +63,7 @@ jobs:
     environment: releases
     steps:
     - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
-    - uses: actions/setup-java@b36c23c0d998641eff861008f374ee103c25ac73 # tag=v3
+    - uses: actions/setup-java@8df1039502a15bceb9433410b1a100fbe190c53b # tag=v3
       with:
         distribution: 'temurin'
         java-version: 8
@@ -85,7 +85,7 @@ jobs:
     environment: releases
     steps:
     - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
-    - uses: actions/setup-java@b36c23c0d998641eff861008f374ee103c25ac73 # tag=v3
+    - uses: actions/setup-java@8df1039502a15bceb9433410b1a100fbe190c53b # tag=v3
       with:
         distribution: 'temurin'
         java-version: 8