diff --git a/.github/workflows/checkDependencies.yml b/.github/workflows/checkDependencies.yml
index 4e89411a13e..93324fc0c74 100644
--- a/.github/workflows/checkDependencies.yml
+++ b/.github/workflows/checkDependencies.yml
@@ -82,7 +82,7 @@ jobs:
         with:
           maven-version: ${{ inputs.mavenVersion }}
       - name: Set up JDK
-        uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018 # v4.2.2
+        uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # v4.7.0
         with:
           java-version: '21'
           distribution: 'temurin'
diff --git a/.github/workflows/checkVersions.yml b/.github/workflows/checkVersions.yml
index 339354cc822..b102efa8de0 100644
--- a/.github/workflows/checkVersions.yml
+++ b/.github/workflows/checkVersions.yml
@@ -35,7 +35,7 @@ jobs:
         fetch-depth: 0 # required for jgit timestamp provider to work
 
     - name: Set up Java
-      uses: actions/setup-java@7a6d8a8234af8eb26422e24e3006232cccaa061b # v4.6.0
+      uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # v4.7.0
       with:
         java-version: 21
         distribution: 'temurin'
diff --git a/.github/workflows/cleanCode.yml b/.github/workflows/cleanCode.yml
index dd717e4bf8a..40e823a7469 100644
--- a/.github/workflows/cleanCode.yml
+++ b/.github/workflows/cleanCode.yml
@@ -87,7 +87,7 @@ jobs:
         with:
           maven-version: ${{ inputs.mavenVersion }}
       - name: Set up JDK
-        uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018 # v4.2.2
+        uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # v4.7.0
         with:
           java-version: |
             8
diff --git a/.github/workflows/codeQLworkflow.yml b/.github/workflows/codeQLworkflow.yml
index 6d9f5a80d56..91c94082a56 100644
--- a/.github/workflows/codeQLworkflow.yml
+++ b/.github/workflows/codeQLworkflow.yml
@@ -59,7 +59,7 @@ jobs:
         languages: ${{ matrix.language }}
 
     - name: Set up Java
-      uses: actions/setup-java@7a6d8a8234af8eb26422e24e3006232cccaa061b # v4.6.0
+      uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # v4.7.0
       with:
         java-version: |
           8
diff --git a/.github/workflows/mavenBuild.yml b/.github/workflows/mavenBuild.yml
index 28320edec0a..4dc4986d713 100644
--- a/.github/workflows/mavenBuild.yml
+++ b/.github/workflows/mavenBuild.yml
@@ -50,7 +50,7 @@ jobs:
        fetch-depth: 0 # required for jgit timestamp provider to work
        submodules: ${{ inputs.submodules }}
     - name: Set up Java
-      uses: actions/setup-java@7a6d8a8234af8eb26422e24e3006232cccaa061b # v4.6.0
+      uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # v4.7.0
       with:
         java-version: |
           8
diff --git a/.github/workflows/prepareRelease.yml b/.github/workflows/prepareRelease.yml
index 91112552553..16628d4bbbc 100644
--- a/.github/workflows/prepareRelease.yml
+++ b/.github/workflows/prepareRelease.yml
@@ -26,7 +26,7 @@ jobs:
       with:
         ref: master
     - name: Set up JDK
-      uses: actions/setup-java@7a6d8a8234af8eb26422e24e3006232cccaa061b # v4.6.0
+      uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # v4.7.0
       with:
         java-version: '21'
         distribution: 'temurin'
diff --git a/.github/workflows/updateRelease.yml b/.github/workflows/updateRelease.yml
index 78b92d7f732..087afd3ced0 100644
--- a/.github/workflows/updateRelease.yml
+++ b/.github/workflows/updateRelease.yml
@@ -16,7 +16,7 @@ jobs:
       with:
         maven-version: 3.9.9
     - name: Set up JDK
-      uses: actions/setup-java@7a6d8a8234af8eb26422e24e3006232cccaa061b # v4.6.0
+      uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # v4.7.0
       with:
         java-version: '21'
         distribution: 'temurin'
diff --git a/.github/workflows/updateTarget.yml b/.github/workflows/updateTarget.yml
index aad1ed9e6d4..ea56df4bca3 100644
--- a/.github/workflows/updateTarget.yml
+++ b/.github/workflows/updateTarget.yml
@@ -34,7 +34,7 @@ jobs:
       with:
         maven-version: 3.9.9
     - name: Set up JDK
-      uses: actions/setup-java@7a6d8a8234af8eb26422e24e3006232cccaa061b # v4.6.0
+      uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # v4.7.0
       with:
         java-version: '21'
         distribution: 'temurin'