diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml
index c9f96f3..37afbcc 100644
--- a/.github/workflows/codeql.yaml
+++ b/.github/workflows/codeql.yaml
@@ -39,7 +39,7 @@ jobs:
           # To support newer Go
           # CodeQL/GitHub uses older Go (1.20?) by default
           go-version-file: go.mod
-      - uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5.6.0
+      - uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5.7.0
         if: ${{ inputs.language == 'java' || inputs.language == 'java-kotlin' }}
         with:
           distribution: 'temurin'