diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index be6e7eb7d..c87a2756e 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -48,14 +48,14 @@ jobs:
       # we explictly force Java 17 because that's the lowest one we support when building packages with ezbake
       - name: Set up Java 17 for JRuby 9
         if: contains(matrix.ruby, 'jruby-9')
-        uses: actions/setup-java@0f481fcb613427c0f801b606911222b5b6f3083a # v5.5.0
+        uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5.6.0
         with:
           distribution: temurin
           java-version: '17'
       # JRuby 10.0.5 requires java 21 or 25
       - name: Set up Java 21 for JRuby 10
         if: contains(matrix.ruby, 'jruby-10')
-        uses: actions/setup-java@0f481fcb613427c0f801b606911222b5b6f3083a # v5.5.0
+        uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5.6.0
         with:
           distribution: temurin
           java-version: '21'