diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 2e7026c9e1..956cc5abc6 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -22,6 +22,9 @@ updates:
   directory: "/"
   schedule:
     interval: weekly
+  ignore:
+  - dependency-name: "gradle/actions/setup-gradle"
+    versions: ['>= 6.0.0'] # license change: the bundled 'gradle-actions-caching' component is licensed and governed by a separate license (no longer MIT)
 
 - package-ecosystem: "npm"
   directory: "/"
diff --git a/.github/workflows/device-tests-android.yml b/.github/workflows/device-tests-android.yml
index 8f988f2346..99e5fc88df 100644
--- a/.github/workflows/device-tests-android.yml
+++ b/.github/workflows/device-tests-android.yml
@@ -130,7 +130,7 @@ jobs:
           path: bin
 
       - name: Setup Gradle
-        uses: gradle/actions/setup-gradle@39e147cb9de83bb9910b8ef8bd7fff0ee20fcd6f # v6.0.1
+        uses: gradle/actions/setup-gradle@0723195856401067f7a2779048b490ace7a47d7c # v5.0.2
 
       # Cached AVD setup per https://github.com/ReactiveCircus/android-emulator-runner/blob/main/README.md