diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 1ee3683..9d3389b 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -147,7 +147,7 @@ jobs:
           java-version: 25
 
       - name: Setup Gradle
-        uses: gradle/actions/setup-gradle@ed408507eac070d1f99cc633dbcf757c94c7933a # v4.3.0
+        uses: gradle/actions/setup-gradle@50e97c2cd7a37755bbfafc9c5b7cafaece252f6e # v4.3.0
 
       - name: Cache PDFium binaries
         uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.2.2
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index cfab6a7..fd65561 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -139,7 +139,7 @@ jobs:
           java-version: 25
 
       - name: Setup Gradle
-        uses: gradle/actions/setup-gradle@ed408507eac070d1f99cc633dbcf757c94c7933a # v4.3.0
+        uses: gradle/actions/setup-gradle@50e97c2cd7a37755bbfafc9c5b7cafaece252f6e # v4.3.0
 
       - name: Build shim
         run: ./gradlew buildShim jar verifyNativeJars -PpdfiumPlatformFilter=${{ matrix.platform }} --warning-mode all
@@ -217,7 +217,7 @@ jobs:
           java-version: 25
 
       - name: Setup Gradle
-        uses: gradle/actions/setup-gradle@ed408507eac070d1f99cc633dbcf757c94c7933a # v4.3.0
+        uses: gradle/actions/setup-gradle@50e97c2cd7a37755bbfafc9c5b7cafaece252f6e # v4.3.0
 
       - name: Set version from tag
         run: |