diff --git a/.github/workflows/benchmark.yml b/.github/workflows/benchmark.yml
index 0d500dea5cf..4c1add6aee7 100644
--- a/.github/workflows/benchmark.yml
+++ b/.github/workflows/benchmark.yml
@@ -33,7 +33,7 @@ jobs:
       # JDK 11 is needed for the build.
       # Search `maven-toolchains-plugin` usages for details.
       - name: Set up JDK 11
-        uses: actions/setup-java@860f60056505705214d223b91ed7a30f173f6142   # 3.1.1
+        uses: actions/setup-java@16cca5479d7c6b6843f6a6515640ba33c6501543   # 3.1.1
         with:
           distribution: temurin
           java-version: 11
@@ -44,7 +44,7 @@ jobs:
       # JDK 8 is needed for the build, and it is the primary bytecode target.
       # Hence, JDK 8 is set up after 11, so that JAVA_HOME used by Maven during build will point to 8.
       - name: Set up JDK 8
-        uses: actions/setup-java@860f60056505705214d223b91ed7a30f173f6142   # 3.1.1
+        uses: actions/setup-java@16cca5479d7c6b6843f6a6515640ba33c6501543   # 3.1.1
         with:
           distribution: temurin
           java-version: 8
@@ -96,7 +96,7 @@ jobs:
           path: log4j-perf/target
 
       - name: Set up JDK ${{ matrix.jdk }}
-        uses: actions/setup-java@860f60056505705214d223b91ed7a30f173f6142   # 3.1.1
+        uses: actions/setup-java@16cca5479d7c6b6843f6a6515640ba33c6501543   # 3.1.1
         with:
           distribution: temurin
           java-version: ${{ matrix.jdk }}
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 573be79315e..35a619aad29 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -41,7 +41,7 @@ jobs:
       # JDK 11 is needed for the build.
       # Search `maven-toolchains-plugin` usages for details.
       - name: Setup JDK 11
-        uses: actions/setup-java@860f60056505705214d223b91ed7a30f173f6142   # 3.1.1
+        uses: actions/setup-java@16cca5479d7c6b6843f6a6515640ba33c6501543   # 3.1.1
         with:
           distribution: temurin
           java-version: 11
@@ -52,7 +52,7 @@ jobs:
       # JDK 8 is needed for the build, and it is the primary bytecode target.
       # Hence, JDK 8 is set up after 11, so that JAVA_HOME used by Maven during build will point to 8.
       - name: Setup JDK 8
-        uses: actions/setup-java@860f60056505705214d223b91ed7a30f173f6142   # 3.1.1
+        uses: actions/setup-java@16cca5479d7c6b6843f6a6515640ba33c6501543   # 3.1.1
         with:
           distribution: temurin
           java-version: 8
@@ -113,7 +113,7 @@ jobs:
       # JDK 11 is needed for the build.
       # Search `maven-toolchains-plugin` usages for details.
       - name: Setup JDK 11
-        uses: actions/setup-java@860f60056505705214d223b91ed7a30f173f6142   # 3.1.1
+        uses: actions/setup-java@16cca5479d7c6b6843f6a6515640ba33c6501543   # 3.1.1
         with:
           distribution: temurin
           java-version: 11
@@ -124,7 +124,7 @@ jobs:
       # JDK 8 is needed for the build, and it is the primary bytecode target.
       # Hence, JDK 8 is set up after 11, so that JAVA_HOME used by Maven during build will point to 8.
       - name: Setup JDK 8
-        uses: actions/setup-java@860f60056505705214d223b91ed7a30f173f6142   # 3.1.1
+        uses: actions/setup-java@16cca5479d7c6b6843f6a6515640ba33c6501543   # 3.1.1
         with:
           distribution: temurin
           java-version: 8
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index d582015929c..e507eafabf8 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -60,7 +60,7 @@ jobs:
       # JDK 11 is needed for the build.
       # Search `maven-toolchains-plugin` usages for details.
       - name: Setup JDK 11
-        uses: actions/setup-java@860f60056505705214d223b91ed7a30f173f6142   # 3.1.1
+        uses: actions/setup-java@16cca5479d7c6b6843f6a6515640ba33c6501543   # 3.1.1
         with:
           distribution: temurin
           java-version: 11
@@ -71,7 +71,7 @@ jobs:
       # JDK 8 is needed for the build, and it is the primary bytecode target.
       # Hence, JDK 8 is set up after 11, so that JAVA_HOME used by Maven during build will point to 8.
       - name: Setup JDK 8
-        uses: actions/setup-java@860f60056505705214d223b91ed7a30f173f6142   # 3.1.1
+        uses: actions/setup-java@16cca5479d7c6b6843f6a6515640ba33c6501543   # 3.1.1
         with:
           distribution: temurin
           java-version: 8