diff --git a/.github/workflows/check_graalvm.yml b/.github/workflows/check_graalvm.yml
index 3bd6446f02..6847486d12 100644
--- a/.github/workflows/check_graalvm.yml
+++ b/.github/workflows/check_graalvm.yml
@@ -44,7 +44,7 @@ jobs:
           curl -L $download_url --output $RUNNER_TEMP/java_package.tar.gz
         shell: bash
       - name: Set up GraalVM 17
-        uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018
+        uses: actions/setup-java@2dfa2011c5b2a0f1489bf9e433881c92c1631f88
         with:
           distribution: 'jdkfile'
           jdkFile: ${{ runner.temp }}/java_package.tar.gz
diff --git a/.github/workflows/check_netty_snapshots.yml b/.github/workflows/check_netty_snapshots.yml
index ce33895bd6..7ced824233 100644
--- a/.github/workflows/check_netty_snapshots.yml
+++ b/.github/workflows/check_netty_snapshots.yml
@@ -23,8 +23,8 @@ jobs:
 
     steps:
       - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
-      - name: Set up JDK 1.8
-        uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018
+      - name: Set up JDK 17
+        uses: actions/setup-java@2dfa2011c5b2a0f1489bf9e433881c92c1631f88
         with:
           distribution: 'temurin'
           java-version: 17
diff --git a/.github/workflows/check_reactor_core_3.6_snapshots.yml b/.github/workflows/check_reactor_core_3.6_snapshots.yml
index c48eafc628..771720079d 100644
--- a/.github/workflows/check_reactor_core_3.6_snapshots.yml
+++ b/.github/workflows/check_reactor_core_3.6_snapshots.yml
@@ -14,7 +14,7 @@ jobs:
         with:
           ref: '1.1.x'
       - name: Set up JDK 1.8
-        uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018
+        uses: actions/setup-java@2dfa2011c5b2a0f1489bf9e433881c92c1631f88
         with:
           distribution: 'temurin'
           java-version: '8'
diff --git a/.github/workflows/check_transport.yml b/.github/workflows/check_transport.yml
index 225c2454c7..d9e768c82e 100644
--- a/.github/workflows/check_transport.yml
+++ b/.github/workflows/check_transport.yml
@@ -11,7 +11,7 @@ jobs:
 #      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
 #        with:
 #          fetch-depth: 0 #needed by spotless
-#      - uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018
+#      - uses: actions/setup-java@2dfa2011c5b2a0f1489bf9e433881c92c1631f88
 #        with:
 #          distribution: 'temurin'
 #          java-version: 17
@@ -75,7 +75,7 @@ jobs:
             path: codec-multipart
       - uses: gradle/actions/wrapper-validation@16bf8bc8fe830fa669c3c9f914d3eb147c629707
       - name: Set up JDK 17
-        uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018
+        uses: actions/setup-java@2dfa2011c5b2a0f1489bf9e433881c92c1631f88
         with:
           distribution: 'temurin'
           java-version: 17
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index cac38d20d3..a1d589d52c 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -24,7 +24,7 @@ jobs:
     steps:
       - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
       - name: setup java
-        uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018
+        uses: actions/setup-java@2dfa2011c5b2a0f1489bf9e433881c92c1631f88
         with:
           distribution: 'temurin'
           java-version: 17
@@ -44,7 +44,7 @@ jobs:
     steps:
       - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
       - name: setup java
-        uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018
+        uses: actions/setup-java@2dfa2011c5b2a0f1489bf9e433881c92c1631f88
         with:
           distribution: 'temurin'
           java-version: '8'
@@ -59,7 +59,7 @@ jobs:
 #    steps:
 #      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
 #      - name: setup java
-#        uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018
+#        uses: actions/setup-java@2dfa2011c5b2a0f1489bf9e433881c92c1631f88
 #        with:
 #          distribution: 'temurin'
 #          java-version: '8'
@@ -81,7 +81,7 @@ jobs:
       - name: Install asciidoctor-pdf / rouge
         run: gem install asciidoctor-pdf rouge
       - name: Setup java 17 for antora
-        uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018
+        uses: actions/setup-java@2dfa2011c5b2a0f1489bf9e433881c92c1631f88
         with:
           distribution: 'temurin'
           java-version: '17'
@@ -108,7 +108,7 @@ jobs:
     environment: snapshots
     steps:
       - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
-      - uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018
+      - uses: actions/setup-java@2dfa2011c5b2a0f1489bf9e433881c92c1631f88
         with:
           distribution: 'temurin'
           java-version: 17
@@ -134,7 +134,7 @@ jobs:
     environment: releases
     steps:
       - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
-      - uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018
+      - uses: actions/setup-java@2dfa2011c5b2a0f1489bf9e433881c92c1631f88
         with:
           distribution: 'temurin'
           java-version: 17
@@ -162,7 +162,7 @@ jobs:
     environment: releases
     steps:
       - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
-      - uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018
+      - uses: actions/setup-java@2dfa2011c5b2a0f1489bf9e433881c92c1631f88
         with:
           distribution: 'temurin'
           java-version: 17