diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index feae5c85..ae80e326 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -42,7 +42,7 @@ jobs:
       # actions/setup-java latest v5 → v5.1.0
       # Auto-generates ~/.m2/settings.xml — no settings.xml needed in repo
       - name: Set up JDK ${{ matrix.java }}
-        uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654  # v5.2.0
+        uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961  # v5.7.0
         with:
           distribution: 'corretto'
           java-version: ${{ matrix.java }}