diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 410f5597..c68c06f9 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -48,7 +48,7 @@ jobs:
           go-version: '1.27.x'
 
       - name: Set up JDK 17 for Android
-        uses: actions/setup-java@dd06d9cba3e5552c54d9f8ea23572deb30010f7c  # v6.0.0 (working hash from release.yml)
+        uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6  # v6.0.1 (working hash from release.yml)
         with:
           java-version: '17'
           distribution: 'temurin'
diff --git a/.github/workflows/pr-test.yml b/.github/workflows/pr-test.yml
index 2b65a834..37d959a1 100644
--- a/.github/workflows/pr-test.yml
+++ b/.github/workflows/pr-test.yml
@@ -101,7 +101,7 @@ jobs:
           set -e
 
       - name: Set up JDK for Android
-        uses: actions/setup-java@dd06d9cba3e5552c54d9f8ea23572deb30010f7c  # v6.0.0
+        uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6  # v6.0.1
         with:
           java-version: '17'
           distribution: 'temurin'