diff --git a/.github/actions/dev-tool-java/action.yml b/.github/actions/dev-tool-java/action.yml
index bbbf336e441..0eea4478987 100644
--- a/.github/actions/dev-tool-java/action.yml
+++ b/.github/actions/dev-tool-java/action.yml
@@ -17,7 +17,7 @@ runs:
   using: "composite"
   steps:
     - name: Set up JDK ${{ inputs.java-version }}
-      uses: actions/setup-java@2dfa2011c5b2a0f1489bf9e433881c92c1631f88 # v4
+      uses: actions/setup-java@b36c23c0d998641eff861008f374ee103c25ac73 # v4
       with:
         distribution: 'temurin'
         java-version: |
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index fa4c55ea896..e540764947d 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -915,7 +915,7 @@ jobs:
           work-branch: iceberg-integration-patched
 
       - name: Setup JDK
-        uses: actions/setup-java@2dfa2011c5b2a0f1489bf9e433881c92c1631f88 # v4
+        uses: actions/setup-java@b36c23c0d998641eff861008f374ee103c25ac73 # v4
         with:
           distribution: 'temurin'
           # Java 17 or 21 required for Nessie build, Java 17 required for Iceberg build, Java 11 required for Flink & Presto