diff --git a/.github/workflows/maven.yml b/.github/workflows/maven.yml
index 76fbed2275..759c01789c 100644
--- a/.github/workflows/maven.yml
+++ b/.github/workflows/maven.yml
@@ -25,7 +25,7 @@ jobs:
     steps:
     - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0
     - name: Set up Java
-      uses: actions/setup-java@cd89f46ac9d01407894225f350157564c9c7cee2 # v3.12.0
+      uses: actions/setup-java@0ab4596768b603586c0de567f2430c30f5b0d2b0 # v3.13.0
       with:
         java-version: |
             8
diff --git a/.github/workflows/sitedocs.yml b/.github/workflows/sitedocs.yml
index 25dd3e9b54..4aa98514b5 100644
--- a/.github/workflows/sitedocs.yml
+++ b/.github/workflows/sitedocs.yml
@@ -32,7 +32,7 @@ jobs:
        token: ${{ secrets.TYCHO_SITE_PAT }}
        repository: 'eclipse-tycho/eclipse-tycho.github.io'
     - name: Set up Java
-      uses: actions/setup-java@cd89f46ac9d01407894225f350157564c9c7cee2 # v3.12.0
+      uses: actions/setup-java@0ab4596768b603586c0de567f2430c30f5b0d2b0 # v3.13.0
       with:
         java-version: 17
         distribution: 'temurin'
diff --git a/.github/workflows/verify-platform.yml b/.github/workflows/verify-platform.yml
index 71809caab5..33fa3d0468 100644
--- a/.github/workflows/verify-platform.yml
+++ b/.github/workflows/verify-platform.yml
@@ -27,7 +27,7 @@ jobs:
        repository: 'eclipse-platform/eclipse.platform.releng.aggregator'
        fetch-depth: 0
     - name: Set up Java
-      uses: actions/setup-java@cd89f46ac9d01407894225f350157564c9c7cee2 # v3.12.0
+      uses: actions/setup-java@0ab4596768b603586c0de567f2430c30f5b0d2b0 # v3.13.0
       with:
         java-version: |
             8
diff --git a/.github/workflows/verify-platform2.yml b/.github/workflows/verify-platform2.yml
index 5c5377b74b..8017f6f16f 100644
--- a/.github/workflows/verify-platform2.yml
+++ b/.github/workflows/verify-platform2.yml
@@ -27,7 +27,7 @@ jobs:
        repository: 'eclipse-platform/eclipse.platform'
        fetch-depth: 0
     - name: Set up Java
-      uses: actions/setup-java@cd89f46ac9d01407894225f350157564c9c7cee2 # v3.12.0
+      uses: actions/setup-java@0ab4596768b603586c0de567f2430c30f5b0d2b0 # v3.13.0
       with:
         java-version: |
             8