diff --git a/.github/workflows/compile_java.yml b/.github/workflows/compile_java.yml
index e4b670e..1458fe4 100644
--- a/.github/workflows/compile_java.yml
+++ b/.github/workflows/compile_java.yml
@@ -21,7 +21,7 @@ jobs:
       # google-java-format uses internal javac APIs removed in JDK 26, so run
       # the lint step on Java 26. Our source code has no Java-26-specific syntax.
       - name: Set up Java 26
-        uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6
+        uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad
         with:
           distribution: 'temurin'
           java-version: '26'
@@ -44,7 +44,7 @@ jobs:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
 
       - name: Set up Java 26
-        uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6
+        uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad
         with:
           distribution: 'temurin'
           java-version: '26'
@@ -67,7 +67,7 @@ jobs:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
 
       - name: Set up Java 26
-        uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6
+        uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad
         with:
           distribution: 'temurin'
           java-version: '26'
@@ -90,7 +90,7 @@ jobs:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
 
       - name: Set up Java 26
-        uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6
+        uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad
         with:
           distribution: 'temurin'
           java-version: '26'
diff --git a/.github/workflows/pre-commit.yml b/.github/workflows/pre-commit.yml
index 9bc5e4c..ed4d31a 100644
--- a/.github/workflows/pre-commit.yml
+++ b/.github/workflows/pre-commit.yml
@@ -31,7 +31,7 @@ jobs:
           go-version: 'stable'
           
       - name: Set up Java 26
-        uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6
+        uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad
         with:
           distribution: 'temurin'
           java-version: '26'
diff --git a/.github/workflows/security-scanning.yml b/.github/workflows/security-scanning.yml
index b5a0ab3..377887b 100644
--- a/.github/workflows/security-scanning.yml
+++ b/.github/workflows/security-scanning.yml
@@ -54,7 +54,7 @@ jobs:
 
       - name: Setup Java
         if: matrix.language == 'java'
-        uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6
+        uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad
         with:
           java-version: '26'
           distribution: 'temurin'