diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index feae5c85..501e0afd 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -42,7 +42,7 @@ jobs:
       # actions/setup-java latest v5 → v5.1.0
       # Auto-generates ~/.m2/settings.xml — no settings.xml needed in repo
       - name: Set up JDK ${{ matrix.java }}
-        uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654  # v5.2.0
+        uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95  # v5.6.0
         with:
           distribution: 'corretto'
           java-version: ${{ matrix.java }}