diff --git a/.github/workflows/pr-checks.yml b/.github/workflows/pr-checks.yml
index 5c42a0512..bc27ff9e7 100644
--- a/.github/workflows/pr-checks.yml
+++ b/.github/workflows/pr-checks.yml
@@ -8,7 +8,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
-    - uses: actions/setup-java@2dfa2011c5b2a0f1489bf9e433881c92c1631f88
+    - uses: actions/setup-java@b36c23c0d998641eff861008f374ee103c25ac73
       with:
         distribution: 'temurin'
         java-version: 8
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 89ba63d15..91a6e9608 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -20,7 +20,7 @@ jobs:
     steps:
     - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
     - name: setup java
-      uses: actions/setup-java@2dfa2011c5b2a0f1489bf9e433881c92c1631f88 # tag=v3
+      uses: actions/setup-java@b36c23c0d998641eff861008f374ee103c25ac73 # tag=v3
       with:
         distribution: 'temurin'
         java-version: 8
@@ -43,7 +43,7 @@ jobs:
     environment: snapshots
     steps:
     - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
-    - uses: actions/setup-java@2dfa2011c5b2a0f1489bf9e433881c92c1631f88 # tag=v3
+    - uses: actions/setup-java@b36c23c0d998641eff861008f374ee103c25ac73 # tag=v3
       with:
         distribution: 'temurin'
         java-version: 8
@@ -63,7 +63,7 @@ jobs:
     environment: releases
     steps:
     - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
-    - uses: actions/setup-java@2dfa2011c5b2a0f1489bf9e433881c92c1631f88 # tag=v3
+    - uses: actions/setup-java@b36c23c0d998641eff861008f374ee103c25ac73 # tag=v3
       with:
         distribution: 'temurin'
         java-version: 8
@@ -85,7 +85,7 @@ jobs:
     environment: releases
     steps:
     - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
-    - uses: actions/setup-java@2dfa2011c5b2a0f1489bf9e433881c92c1631f88 # tag=v3
+    - uses: actions/setup-java@b36c23c0d998641eff861008f374ee103c25ac73 # tag=v3
       with:
         distribution: 'temurin'
         java-version: 8