diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml
index cc1ad57..319d84b 100644
--- a/.github/workflows/codeql.yaml
+++ b/.github/workflows/codeql.yaml
@@ -39,7 +39,7 @@ jobs:
           # To support newer Go
           # CodeQL/GitHub uses older Go (1.20?) by default
           go-version-file: go.mod
-      - uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
+      - uses: actions/setup-java@ad2b38190b15e4d6bdf0c97fb4fca8412226d287 # v5.3.0
         if: ${{ inputs.language == 'java' || inputs.language == 'java-kotlin' }}
         with:
           distribution: 'temurin'