diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index f731800..d2f1189 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -154,7 +154,7 @@ jobs:
       - uses: actions/checkout@v7
         with:
           persist-credentials: false
-      - uses: actions/setup-java@v5
+      - uses: actions/setup-java@v6
         with:
           distribution: "temurin"
           java-version: "25"
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index a920ce8..6c53dfe 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -214,7 +214,7 @@ jobs:
           artifact-ids: ${{ needs.build_libs.outputs.sbom }}
       - name: View SBOM
         run: cat bom.json
-      - uses: anchore/scan-action@e1165082ffb1fe366ebaf02d8526e7c4989ea9d2 # v7.4.0
+      - uses: anchore/scan-action@27805bf3b4e84b4a5c980df22ed233c00390a439 # v7.4.2
         id: scan
         with:
           sbom: bom.json