diff --git a/config/workflows/analysis.yml b/config/workflows/analysis.yml
index 09c03f1..ee40370 100644
--- a/config/workflows/analysis.yml
+++ b/config/workflows/analysis.yml
@@ -57,7 +57,7 @@ jobs:
                     repository: ${{ steps.get-vars.outputs.repo }}
                     ref: ${{ steps.get-vars.outputs.branch }}
             -   name: Set up JDK 21
-                uses: actions/setup-java@77dd5b2ce225ea11469928ac317850245a74ae78 # v6.2.0
+                uses: actions/setup-java@d1374f8ac74474200d16ef8ecee22c7ae7a51880 # v6.3.0
                 with:
                     distribution: "temurin"
                     java-version: 25
diff --git a/config/workflows/codeql.yml b/config/workflows/codeql.yml
index a716028..d0af6a5 100644
--- a/config/workflows/codeql.yml
+++ b/config/workflows/codeql.yml
@@ -53,7 +53,7 @@ jobs:
         with:
           languages: ${{ matrix.language }}
       - name: Set up JDK 21
-        uses: actions/setup-java@77dd5b2ce225ea11469928ac317850245a74ae78 # v6.2.0
+        uses: actions/setup-java@d1374f8ac74474200d16ef8ecee22c7ae7a51880 # v6.3.0
         with:
           distribution: "temurin"
           java-version: 25
diff --git a/config/workflows/qa.yml b/config/workflows/qa.yml
index 9d3e465..0be1898 100644
--- a/config/workflows/qa.yml
+++ b/config/workflows/qa.yml
@@ -31,7 +31,7 @@ jobs:
           persist-credentials: false
 
       - name: set up JDK 21
-        uses: actions/setup-java@77dd5b2ce225ea11469928ac317850245a74ae78 # v6.2.0
+        uses: actions/setup-java@d1374f8ac74474200d16ef8ecee22c7ae7a51880 # v6.3.0
         if: ${{ steps.check-secrets.outputs.ok == 'true' }}
         with:
           distribution: "temurin"