diff --git a/.github/workflows/assign-milestone.yml b/.github/workflows/assign-milestone.yml
index f4d93d37b6..d684b11866 100644
--- a/.github/workflows/assign-milestone.yml
+++ b/.github/workflows/assign-milestone.yml
@@ -16,7 +16,7 @@ jobs:
         with:
           repository: 'dropwizard/metrics'
           ref: ${{ github.base_ref }}
-      - uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # v4.7.1
+      - uses: actions/setup-java@dded0888837ed1f317902acf8a20df0ad188d165 # v5.0.0
         with:
           distribution: 'zulu'
           java-version: '21'
diff --git a/.github/workflows/maven.yml b/.github/workflows/maven.yml
index c6cbedee6c..3f530d9d56 100644
--- a/.github/workflows/maven.yml
+++ b/.github/workflows/maven.yml
@@ -23,7 +23,7 @@ jobs:
       with:
         fetch-depth: 0
     - name: Set up JDK
-      uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # v4
+      uses: actions/setup-java@dded0888837ed1f317902acf8a20df0ad188d165 # v5
       with:
         distribution: 'zulu'
         java-version: ${{ matrix.java_version }}
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 89ffe21a39..ce40a2cc3c 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -15,7 +15,7 @@ jobs:
     steps:
     - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
     - name: Set up JDK
-      uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # v4
+      uses: actions/setup-java@dded0888837ed1f317902acf8a20df0ad188d165 # v5
       with:
         java-version: 17
         distribution: 'zulu'
diff --git a/.github/workflows/trigger-release.yml b/.github/workflows/trigger-release.yml
index f43e3e7e9e..b378121ac8 100644
--- a/.github/workflows/trigger-release.yml
+++ b/.github/workflows/trigger-release.yml
@@ -23,7 +23,7 @@ jobs:
       with:
         ssh-key: ${{ secrets.SSH_PRIVATE_KEY }}
     - name: Set up JDK
-      uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # v4
+      uses: actions/setup-java@dded0888837ed1f317902acf8a20df0ad188d165 # v5
       with:
         distribution: 'temurin'
         java-version: '17'