diff --git a/.github/workflows/build-all-and-publish.yml b/.github/workflows/build-all-and-publish.yml
index 6d734bf..1ea603b 100644
--- a/.github/workflows/build-all-and-publish.yml
+++ b/.github/workflows/build-all-and-publish.yml
@@ -66,11 +66,11 @@ jobs:
         with:
           distribution: zulu
           java-version: '7'
-      - name: Setup Temurin JDK 21
+      - name: Setup Temurin JDK 25
         uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5
         with:
           distribution: temurin
-          java-version: '21'
+          java-version: '25'
           cache: maven
 
       - name: Install cross toolchain (if needed)
@@ -124,11 +124,11 @@ jobs:
         with:
           distribution: zulu
           java-version: '7'
-      - name: Setup Temurin JDK 21
+      - name: Setup Temurin JDK 25
         uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5
         with:
           distribution: temurin
-          java-version: '21'
+          java-version: '25'
           cache: maven
 
       - name: Build (native binary build only)
@@ -169,11 +169,11 @@ jobs:
         with:
           distribution: zulu
           java-version: '7'
-      - name: Setup Temurin JDK 21
+      - name: Setup Temurin JDK 25
         uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5
         with:
           distribution: temurin
-          java-version: '21'
+          java-version: '25'
           cache: maven
 
       # See LZ4FrameIOStreamTest
@@ -223,12 +223,12 @@ jobs:
           java-version: '7'
 
       # with central credentials
-      - name: Setup Temurin JDK 21 (publish)
+      - name: Setup Temurin JDK 25 (publish)
         uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5
         if: github.event_name == 'release' || inputs.publish
         with:
           distribution: temurin
-          java-version: '21'
+          java-version: '25'
           cache: maven
           gpg-private-key: ${{ secrets.GPG_KEY }}
           gpg-passphrase: GPG_PASSWORD
@@ -236,12 +236,12 @@ jobs:
           server-username: CENTRAL_TOKEN_USERNAME
           server-password: CENTRAL_TOKEN_PASSWORD
       # without central credentials
-      - name: Setup Temurin JDK 21
+      - name: Setup Temurin JDK 25
         uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5
         if: github.event_name != 'release' && !inputs.publish
         with:
           distribution: temurin
-          java-version: '21'
+          java-version: '25'
           cache: maven
 
       - name: Download natives
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index 1b8585c..98de896 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -19,11 +19,11 @@ jobs:
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
         with:
           fetch-depth: 0
-      - name: Setup Temurin JDK 21
+      - name: Setup Temurin JDK 25
         uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5
         with:
           distribution: temurin
-          java-version: '21'
+          java-version: '25'
           cache: maven
       - name: Install uv
         uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index c67c8f0..3f2074d 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -36,11 +36,11 @@ jobs:
         with:
           distribution: zulu
           java-version: '7'
-      - name: Setup Temurin JDK 21
+      - name: Setup Temurin JDK 25
         uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5
         with:
           distribution: temurin
-          java-version: '21'
+          java-version: '25'
           cache: maven
       - name: Build (mvn verify)
         run: |