diff --git a/.github/workflows/maven.yml b/.github/workflows/maven.yml
index 7892b5148e..89dc7b6195 100644
--- a/.github/workflows/maven.yml
+++ b/.github/workflows/maven.yml
@@ -25,7 +25,7 @@ jobs:
     steps:
     - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
     - name: Set up Java
-      uses: actions/setup-java@99b8673ff64fbf99d8d325f52d9a5bdedb8483e9 # v4.2.1
+      uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018 # v4.2.2
       with:
         java-version: |
             21
diff --git a/.github/workflows/sitedocs.yml b/.github/workflows/sitedocs.yml
index f6a6aef3ae..e3cd8ff263 100644
--- a/.github/workflows/sitedocs.yml
+++ b/.github/workflows/sitedocs.yml
@@ -32,7 +32,7 @@ jobs:
        token: ${{ secrets.TYCHO_SITE_PAT }}
        repository: 'eclipse-tycho/eclipse-tycho.github.io'
     - name: Set up Java
-      uses: actions/setup-java@99b8673ff64fbf99d8d325f52d9a5bdedb8483e9 # v4.2.1
+      uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018 # v4.2.2
       with:
         java-version: 17
         distribution: 'temurin'
diff --git a/.github/workflows/verify-platform.yml b/.github/workflows/verify-platform.yml
index 255a3d7e8a..dc18cf40b7 100644
--- a/.github/workflows/verify-platform.yml
+++ b/.github/workflows/verify-platform.yml
@@ -27,7 +27,7 @@ jobs:
        repository: 'eclipse-platform/eclipse.platform.releng.aggregator'
        fetch-depth: 0
     - name: Set up Java
-      uses: actions/setup-java@99b8673ff64fbf99d8d325f52d9a5bdedb8483e9 # v4.2.1
+      uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018 # v4.2.2
       with:
         java-version: |
             8
diff --git a/.github/workflows/verify-platform2.yml b/.github/workflows/verify-platform2.yml
index 8c12c41ea7..76ead81d8d 100644
--- a/.github/workflows/verify-platform2.yml
+++ b/.github/workflows/verify-platform2.yml
@@ -27,7 +27,7 @@ jobs:
        repository: 'eclipse-platform/eclipse.platform'
        fetch-depth: 0
     - name: Set up Java
-      uses: actions/setup-java@99b8673ff64fbf99d8d325f52d9a5bdedb8483e9 # v4.2.1
+      uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018 # v4.2.2
       with:
         java-version: |
             8