diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 44a89e7..5f58aba 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -41,7 +41,7 @@ jobs:
       # setup-java still exports JAVA_HOME_<version>_<arch> for both, and
       # setup-gradle registers them as toolchain candidates.
       - name: Set up JDKs (test=${{ matrix.java }}, compile/daemon=17)
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@v5
         with:
           distribution: temurin
           java-version: |
@@ -92,7 +92,7 @@ jobs:
         uses: actions/checkout@v7
 
       - name: Set up JDKs (test=${{ matrix.java }}, compile/daemon=17)
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@v5
         with:
           distribution: temurin
           java-version: |
diff --git a/.github/workflows/pr-integration-on-demand.yml b/.github/workflows/pr-integration-on-demand.yml
index 70f3ccd..35bee1a 100644
--- a/.github/workflows/pr-integration-on-demand.yml
+++ b/.github/workflows/pr-integration-on-demand.yml
@@ -151,7 +151,7 @@ jobs:
       # only supports JDKs up to 23 as its daemon runtime). The matrix
       # JDK is still installed and registered as a toolchain target.
       - name: Set up JDKs (test=${{ matrix.java }}, compile/daemon=17)
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@v5
         with:
           distribution: temurin
           java-version: |
diff --git a/.github/workflows/pr-matrix-on-demand.yml b/.github/workflows/pr-matrix-on-demand.yml
index 7fd0216..b1f590f 100644
--- a/.github/workflows/pr-matrix-on-demand.yml
+++ b/.github/workflows/pr-matrix-on-demand.yml
@@ -114,7 +114,7 @@ jobs:
       # doesn't support JDK 24+ as its daemon runtime). The matrix JDK
       # is still installed and registered as a toolchain target.
       - name: Set up JDKs (test=${{ matrix.java }}, compile/daemon=17)
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@v5
         with:
           distribution: temurin
           java-version: |
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 1e97753..3a8c65d 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -81,7 +81,7 @@ jobs:
           ref: ${{ inputs.ref || github.sha }}
 
       - name: Set up JDK 17
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@v5
         with:
           distribution: temurin
           java-version: "17"
diff --git a/.github/workflows/pull-request.yml b/.github/workflows/pull-request.yml
index 5abf441..23afaa3 100644
--- a/.github/workflows/pull-request.yml
+++ b/.github/workflows/pull-request.yml
@@ -31,7 +31,7 @@ jobs:
       # PRs only run on JDK 17 (the minimum target). Forward-compat
       # regressions on JDK 21/25 are caught post-merge by main.yml.
       - name: Set up JDK 17
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@v5
         with:
           distribution: temurin
           java-version: '17'
diff --git a/.github/workflows/tag-and-release.yml b/.github/workflows/tag-and-release.yml
index 69bcf10..c5f5d90 100644
--- a/.github/workflows/tag-and-release.yml
+++ b/.github/workflows/tag-and-release.yml
@@ -79,7 +79,7 @@ jobs:
       # (compile + Gradle daemon runtime). Order matters — setup-java points
       # JAVA_HOME at the LAST entry, so 17 must be last for matrix.java = 25.
       - name: Set up JDKs (test=${{ matrix.java }}, compile/daemon=17)
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@v5
         with:
           distribution: temurin
           java-version: |