diff --git a/.github/reusable-workflows/setup-gradle/action.yml b/.github/reusable-workflows/setup-gradle/action.yml
index d8f9c2a20..85ba05ac3 100644
--- a/.github/reusable-workflows/setup-gradle/action.yml
+++ b/.github/reusable-workflows/setup-gradle/action.yml
@@ -44,7 +44,7 @@ runs:
         java-version: ${{ inputs.java-version }}
 
     - name: Setup Gradle
-      uses: gradle/actions/setup-gradle@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6
+      uses: gradle/actions/setup-gradle@3f5f9adaf7d9fecd50b5935e54106014257a94e6 # v6
       with:
         add-job-summary: always
         cache-cleanup: on-success
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index d8223a2db..11e4ee039 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -22,7 +22,7 @@ jobs:
           java-version: '25.0.4+101.0.LTS'
 
       - name: Setup Gradle
-        uses: gradle/actions/setup-gradle@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6
+        uses: gradle/actions/setup-gradle@3f5f9adaf7d9fecd50b5935e54106014257a94e6 # v6
 
       - name: Decode signing keystore
         run: echo "${{ secrets.KEYSTORE_BASE64 }}" | base64 -d > keystore.jks