diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 4744a96e..40515d82 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -28,7 +28,7 @@ jobs:
       - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # ratchet:actions/checkout@v7.0.0
         with:
           persist-credentials: false
-      - uses: dorny/paths-filter@fbd0ab8f3e69293af611ebaee6363fc25e6d187d # ratchet:dorny/paths-filter@v4.0.1
+      - uses: dorny/paths-filter@7b450fff21473bca461d4b92ce414b9d0420d706 # ratchet:dorny/paths-filter@v4.0.2
         id: filter
         with:
           filters: |
diff --git a/.github/workflows/generate_release_rcs.yml b/.github/workflows/generate_release_rcs.yml
index 0924836e..09b28148 100644
--- a/.github/workflows/generate_release_rcs.yml
+++ b/.github/workflows/generate_release_rcs.yml
@@ -42,7 +42,7 @@ jobs:
         with:
           persist-credentials: false
       - name: Set up JDK 17
-        uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 # v5.4.0
+        uses: actions/setup-java@0f481fcb613427c0f801b606911222b5b6f3083a # v5.5.0
         with:
           java-version: '17'
           distribution: 'temurin'
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 84e31044..9fd6aa44 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -19,6 +19,6 @@ jobs:
       - name: Lint GitHub Actions
         uses: abcxyz/actions/.github/actions/lint-github-actions@3894a8d6a18b9aa159fe9092501d523d97f07110 # ratchet:abcxyz/actions/.github/actions/lint-github-actions@main
       - name: Ratchet Check
-        uses: sethvargo/ratchet@c7c58082b6096c976e42dfcc1ddab83f97d61c28 # ratchet:sethvargo/ratchet@main
+        uses: sethvargo/ratchet@15bde13e63a9fe94f9abe1c2de94b7efe95da311 # ratchet:sethvargo/ratchet@main
         with:
           files: .github/workflows/*.yml
diff --git a/.github/workflows/oss-licenses.yml b/.github/workflows/oss-licenses.yml
index 8dc529f8..1ac5b92d 100644
--- a/.github/workflows/oss-licenses.yml
+++ b/.github/workflows/oss-licenses.yml
@@ -17,13 +17,13 @@ jobs:
           persist-credentials: false
 
       - name: Set up JDK 17
-        uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 # ratchet:actions/setup-java@v5.4.0
+        uses: actions/setup-java@0f481fcb613427c0f801b606911222b5b6f3083a # ratchet:actions/setup-java@v5.5.0
         with:
           java-version: '17'
           distribution: 'temurin'
 
       - name: Set up JDK 21
-        uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 # ratchet:actions/setup-java@v5.4.0
+        uses: actions/setup-java@0f481fcb613427c0f801b606911222b5b6f3083a # ratchet:actions/setup-java@v5.5.0
         with:
           java-version: '21'
           distribution: 'temurin'
@@ -73,13 +73,13 @@ jobs:
 
       # We need both JDK 17 (to build the plugin) and JDK 21 (to run the newer AGP versions).
       - name: Set up JDK 17
-        uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 # ratchet:actions/setup-java@v5.4.0
+        uses: actions/setup-java@0f481fcb613427c0f801b606911222b5b6f3083a # ratchet:actions/setup-java@v5.5.0
         with:
           java-version: '17'
           distribution: 'temurin'
 
       - name: Set up JDK 21
-        uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 # ratchet:actions/setup-java@v5.4.0
+        uses: actions/setup-java@0f481fcb613427c0f801b606911222b5b6f3083a # ratchet:actions/setup-java@v5.5.0
         with:
           java-version: '21'
           distribution: 'temurin'
@@ -120,13 +120,13 @@ jobs:
           path: oss-licenses-plugin/build/repo/
 
       - name: Set up JDK 17
-        uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 # ratchet:actions/setup-java@v5.4.0
+        uses: actions/setup-java@0f481fcb613427c0f801b606911222b5b6f3083a # ratchet:actions/setup-java@v5.5.0
         with:
           java-version: '17'
           distribution: 'temurin'
 
       - name: Set up JDK 21
-        uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 # ratchet:actions/setup-java@v5.4.0
+        uses: actions/setup-java@0f481fcb613427c0f801b606911222b5b6f3083a # ratchet:actions/setup-java@v5.5.0
         with:
           java-version: '21'
           distribution: 'temurin'
diff --git a/.github/workflows/services_and_version_matcher.yml b/.github/workflows/services_and_version_matcher.yml
index 6f51efad..76e71cf1 100644
--- a/.github/workflows/services_and_version_matcher.yml
+++ b/.github/workflows/services_and_version_matcher.yml
@@ -24,7 +24,7 @@ jobs:
           persist-credentials: false
 
       - name: Set up JDK 17
-        uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 # ratchet:actions/setup-java@v5.4.0
+        uses: actions/setup-java@0f481fcb613427c0f801b606911222b5b6f3083a # ratchet:actions/setup-java@v5.5.0
         with:
           java-version: '17'
           distribution: 'temurin'
@@ -48,7 +48,7 @@ jobs:
           persist-credentials: false
 
       - name: Set up JDK 17
-        uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 # ratchet:actions/setup-java@v5.4.0
+        uses: actions/setup-java@0f481fcb613427c0f801b606911222b5b6f3083a # ratchet:actions/setup-java@v5.5.0
         with:
           java-version: '17'
           distribution: 'temurin'