diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml
index f6f4a9a..c47a16b 100644
--- a/.github/workflows/codeql.yaml
+++ b/.github/workflows/codeql.yaml
@@ -39,7 +39,7 @@ jobs:
           # To support newer Go
           # CodeQL/GitHub uses older Go (1.20?) by default
           go-version-file: go.mod
-      - uses: actions/setup-java@ad2b38190b15e4d6bdf0c97fb4fca8412226d287 # v5.3.0
+      - uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5.6.0
         if: ${{ inputs.language == 'java' || inputs.language == 'java-kotlin' }}
         with:
           distribution: 'temurin'