diff --git a/.github/workflows/container.yml b/.github/workflows/container.yml
index 579f1bbb..b3cc3298 100644
--- a/.github/workflows/container.yml
+++ b/.github/workflows/container.yml
@@ -17,7 +17,7 @@ jobs:
       MVN: ./mvnw --show-version --batch-mode --no-transfer-progress
     steps:
       - uses: actions/checkout@v7
-      - uses: actions/setup-java@v5
+      - uses: actions/setup-java@v5.6.0
         with:
           java-version: 25
           distribution: temurin
diff --git a/.github/workflows/hal-op.yml b/.github/workflows/hal-op.yml
index ba27b48b..fda8f3a4 100644
--- a/.github/workflows/hal-op.yml
+++ b/.github/workflows/hal-op.yml
@@ -14,7 +14,7 @@ jobs:
       MVN: ./mvnw --show-version --batch-mode --no-transfer-progress
     steps:
       - uses: actions/checkout@v7
-      - uses: actions/setup-java@v5
+      - uses: actions/setup-java@v5.6.0
         with:
           java-version: 25
           distribution: temurin
diff --git a/.github/workflows/hal-os.yml b/.github/workflows/hal-os.yml
index a8ce42f4..f78def3f 100644
--- a/.github/workflows/hal-os.yml
+++ b/.github/workflows/hal-os.yml
@@ -14,7 +14,7 @@ jobs:
       MVN: ./mvnw --show-version --batch-mode --no-transfer-progress
     steps:
       - uses: actions/checkout@v7
-      - uses: actions/setup-java@v5
+      - uses: actions/setup-java@v5.6.0
         with:
           java-version: 25
           distribution: temurin
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 39b75148..a33c3ef2 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -15,14 +15,14 @@ jobs:
       MVN: ./mvnw --show-version --batch-mode --no-transfer-progress
     steps:
       - uses: actions/checkout@v7
-      - uses: actions/setup-java@v5
+      - uses: actions/setup-java@v5.6.0
         with:
           java-version: 25
           distribution: temurin
           cache: maven
       - run: $MVN package
         working-directory: bom
-      - uses: actions/setup-java@v5
+      - uses: actions/setup-java@v5.6.0
         with: # running setup-java again overwrites the settings.xml
           java-version: 25
           distribution: temurin
@@ -45,13 +45,13 @@ jobs:
       MVN: ./mvnw --show-version --batch-mode --no-transfer-progress
     steps:
       - uses: actions/checkout@v7
-      - uses: actions/setup-java@v5
+      - uses: actions/setup-java@v5.6.0
         with:
           java-version: 25
           distribution: temurin
           cache: maven
       - run: $MVN package
-      - uses: actions/setup-java@v5
+      - uses: actions/setup-java@v5.6.0
         with: # running setup-java again overwrites the settings.xml
           java-version: 25
           distribution: temurin
@@ -118,7 +118,7 @@ jobs:
       MVN: ./mvnw --show-version --batch-mode --no-transfer-progress
     steps:
       - uses: actions/checkout@v7
-      - uses: actions/setup-java@v5
+      - uses: actions/setup-java@v5.6.0
         with:
           java-version: 25
           distribution: temurin
diff --git a/.github/workflows/test-suite.yml b/.github/workflows/test-suite.yml
index 43e2ece5..fc4f3769 100644
--- a/.github/workflows/test-suite.yml
+++ b/.github/workflows/test-suite.yml
@@ -22,7 +22,7 @@ jobs:
       MVN: ./mvnw --show-version --batch-mode --no-transfer-progress
     steps:
       - uses: actions/checkout@v7
-      - uses: actions/setup-java@v5
+      - uses: actions/setup-java@v5.6.0
         with:
           java-version: 25
           distribution: temurin
diff --git a/.github/workflows/verify.yml b/.github/workflows/verify.yml
index bdbb2b30..707f61d1 100644
--- a/.github/workflows/verify.yml
+++ b/.github/workflows/verify.yml
@@ -14,7 +14,7 @@ jobs:
       MVN: ./mvnw --show-version --batch-mode --no-transfer-progress
     steps:
       - uses: actions/checkout@v7
-      - uses: actions/setup-java@v5
+      - uses: actions/setup-java@v5.6.0
         with:
           java-version: 25
           distribution: temurin