diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 2d9aeb934..d1f30005e 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -125,7 +125,7 @@ jobs:
           node-version: 24
           cache: npm
 
-      - uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad # v6.1.0
+      - uses: actions/setup-java@77dd5b2ce225ea11469928ac317850245a74ae78 # v6.2.0
         with:
           distribution: temurin
           java-version: 17
@@ -271,7 +271,7 @@ jobs:
       # The .NET 10 SDK builds the netstandard2.0 and net8.0 targets and
       # understands the .slnx solution format; the 8.0.x entry provides the
       # runtime used by the tests.
-      - uses: actions/setup-dotnet@a98b56852c35b8e3190ac28c8c2271da59106c68 # v6.0.0
+      - uses: actions/setup-dotnet@0f4a354dd5547a28c70b7853dbd95d5b67886e73 # v6.1.0
         with:
           dotnet-version: |
             8.0.x