diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml
index f6f4a9a..e95c7e7 100644
--- a/.github/workflows/codeql.yaml
+++ b/.github/workflows/codeql.yaml
@@ -39,7 +39,7 @@ jobs:
           # To support newer Go
           # CodeQL/GitHub uses older Go (1.20?) by default
           go-version-file: go.mod
-      - uses: actions/setup-java@ad2b38190b15e4d6bdf0c97fb4fca8412226d287 # v5.3.0
+      - uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 # v5.4.0
         if: ${{ inputs.language == 'java' || inputs.language == 'java-kotlin' }}
         with:
           distribution: 'temurin'