diff --git a/.github/workflows/coverage.yml b/.github/workflows/coverage.yml
index 3e166662..bc1cbfc8 100644
--- a/.github/workflows/coverage.yml
+++ b/.github/workflows/coverage.yml
@@ -44,7 +44,7 @@ jobs:
           fetch-depth: 0
 
       - name: Set up JDK 17
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@v6
         with:
           java-version: '17'
           distribution: 'corretto'
diff --git a/.github/workflows/cross-platform-tests.yml b/.github/workflows/cross-platform-tests.yml
index b3bed7bc..32e13840 100644
--- a/.github/workflows/cross-platform-tests.yml
+++ b/.github/workflows/cross-platform-tests.yml
@@ -37,7 +37,7 @@ jobs:
         uses: actions/checkout@v4
 
       - name: Set up JDK 17
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@v6
         with:
           java-version: '17'
           distribution: 'corretto'
diff --git a/.github/workflows/dependency-security.yml b/.github/workflows/dependency-security.yml
index 6f2393f6..3fcbaa8c 100644
--- a/.github/workflows/dependency-security.yml
+++ b/.github/workflows/dependency-security.yml
@@ -43,7 +43,7 @@ jobs:
       # dependencies -- exactly the blind spot that let a known org.json CVE sit in the demo
       # modules after sdk-java had been fixed.
       - name: Set up JDK 17
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@v6
         with:
           java-version: '17'
           distribution: 'corretto'
@@ -150,7 +150,7 @@ jobs:
       contents: write
     steps:
       - uses: actions/checkout@v4
-      - uses: actions/setup-java@v4
+      - uses: actions/setup-java@v6
         with:
           java-version: '17'
           distribution: 'corretto'
diff --git a/.github/workflows/gradle.yml b/.github/workflows/gradle.yml
index 3a9cad6d..0b34e564 100644
--- a/.github/workflows/gradle.yml
+++ b/.github/workflows/gradle.yml
@@ -24,7 +24,7 @@ jobs:
         uses: actions/checkout@v4
 
       - name: Set up JDK 8
-        uses: actions/setup-java@v3
+        uses: actions/setup-java@v6
         with:
           java-version: '8'
           distribution: 'corretto'
diff --git a/.github/workflows/publishing.yml b/.github/workflows/publishing.yml
index 5daee1da..e5a1dfe3 100644
--- a/.github/workflows/publishing.yml
+++ b/.github/workflows/publishing.yml
@@ -17,7 +17,7 @@ jobs:
         uses: actions/checkout@v4
 
       - name: Set up JDK 8
-        uses: actions/setup-java@v3
+        uses: actions/setup-java@v6
         with:
           java-version: '8'
           distribution: 'corretto'