diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 14256832e4..02b8f8c028 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -16,19 +16,19 @@ jobs:
         shell: bash
       - name: Setup JDK 9
         if: contains('main 3.6.x', github.base_ref)
-        uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018 # tag=v3
+        uses: actions/setup-java@b36c23c0d998641eff861008f374ee103c25ac73 # tag=v3
         with:
           distribution: 'jdkfile'
           java-version: 9.0.4
           jdkFile: /opt/openjdk/java9/OpenJDK9U-jdk_x64_linux_hotspot_9.0.4_11.tar.gz
       - name: Setup JDK 21
         if: contains('main 3.6.x', github.base_ref)
-        uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018 # tag=v3
+        uses: actions/setup-java@b36c23c0d998641eff861008f374ee103c25ac73 # tag=v3
         with:
           distribution: 'temurin'
           java-version: 21
       - name: Setup JDK 8
-        uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018 # tag=v3
+        uses: actions/setup-java@b36c23c0d998641eff861008f374ee103c25ac73 # tag=v3
         with:
           distribution: 'temurin'
           java-version: 8
@@ -79,19 +79,19 @@ jobs:
       shell: bash
     - name: Setup Java 9
       if: contains('main 3.6.x', github.base_ref)
-      uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018 # tag=v3
+      uses: actions/setup-java@b36c23c0d998641eff861008f374ee103c25ac73 # tag=v3
       with:
         distribution: 'jdkfile'
         java-version: 9.0.4
         jdkFile: /opt/openjdk/java9/OpenJDK9U-jdk_x64_linux_hotspot_9.0.4_11.tar.gz
     - name: Setup Java 21
       if: contains('main 3.6.x', github.base_ref)
-      uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018 # tag=v3
+      uses: actions/setup-java@b36c23c0d998641eff861008f374ee103c25ac73 # tag=v3
       with:
         distribution: 'temurin'
         java-version: 21
     - name: Setup Java 8
-      uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018 # tag=v3
+      uses: actions/setup-java@b36c23c0d998641eff861008f374ee103c25ac73 # tag=v3
       with:
         distribution: 'temurin'
         java-version: 8
diff --git a/.github/workflows/full.yml b/.github/workflows/full.yml
index 48dfb3ed42..6c96203b79 100644
--- a/.github/workflows/full.yml
+++ b/.github/workflows/full.yml
@@ -31,19 +31,19 @@ jobs:
         shell: bash
       - name: Setup Java 9
         if: contains('main 3.6.x', matrix.branch)
-        uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018 # tag=v3
+        uses: actions/setup-java@b36c23c0d998641eff861008f374ee103c25ac73 # tag=v3
         with:
           distribution: 'jdkfile'
           java-version: 9.0.4
           jdkFile: /opt/openjdk/java9/OpenJDK9U-jdk_x64_linux_hotspot_9.0.4_11.tar.gz
       - name: Setup Java 21
         if: contains('main 3.6.x', matrix.branch)
-        uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018 # tag=v3
+        uses: actions/setup-java@b36c23c0d998641eff861008f374ee103c25ac73 # tag=v3
         with:
           distribution: 'temurin'
           java-version: 21
       - name: Setup Java 8
-        uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018 # tag=v3
+        uses: actions/setup-java@b36c23c0d998641eff861008f374ee103c25ac73 # tag=v3
         with:
           distribution: 'temurin'
           java-version: 8
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index d02283007e..65a9b6389d 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -41,19 +41,19 @@ jobs:
       shell: bash
     - name: Setup JDK 9
       if: contains('main 3.6.x', github.base_ref)
-      uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018 # tag=v3
+      uses: actions/setup-java@b36c23c0d998641eff861008f374ee103c25ac73 # tag=v3
       with:
         distribution: 'jdkfile'
         java-version: 9.0.4
         jdkFile: /opt/openjdk/java9/OpenJDK9U-jdk_x64_linux_hotspot_9.0.4_11.tar.gz
     - name: Setup JDK 21
       if: contains('main 3.6.x', github.base_ref)
-      uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018 # tag=v3
+      uses: actions/setup-java@b36c23c0d998641eff861008f374ee103c25ac73 # tag=v3
       with:
         distribution: 'temurin'
         java-version: 21
     - name: Setup JDK 8
-      uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018 # tag=v3
+      uses: actions/setup-java@b36c23c0d998641eff861008f374ee103c25ac73 # tag=v3
       with:
         distribution: 'temurin'
         java-version: 8
@@ -84,7 +84,7 @@ jobs:
       - name: Install asciidoctor-pdf / rouge
         run: gem install asciidoctor-pdf rouge
       - name: Setup java 21 for antora
-        uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018 # v4
+        uses: actions/setup-java@b36c23c0d998641eff861008f374ee103c25ac73 # v4
         with:
           distribution: 'temurin'
           java-version: '21'
@@ -113,19 +113,19 @@ jobs:
       shell: bash
     - name: Setup JDK 9
       if: contains('main 3.6.x', github.base_ref)
-      uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018 # tag=v3
+      uses: actions/setup-java@b36c23c0d998641eff861008f374ee103c25ac73 # tag=v3
       with:
         distribution: 'jdkfile'
         java-version: 9.0.4
         jdkFile: /opt/openjdk/java9/OpenJDK9U-jdk_x64_linux_hotspot_9.0.4_11.tar.gz
     - name: Setup JDK 21
       if: contains('main 3.6.x', github.base_ref)
-      uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018 # tag=v3
+      uses: actions/setup-java@b36c23c0d998641eff861008f374ee103c25ac73 # tag=v3
       with:
         distribution: 'temurin'
         java-version: 21
     - name: Setup JDK 8
-      uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018 # tag=v3
+      uses: actions/setup-java@b36c23c0d998641eff861008f374ee103c25ac73 # tag=v3
       with:
         distribution: 'temurin'
         java-version: 8
@@ -156,19 +156,19 @@ jobs:
       shell: bash
     - name: Setup JDK 9
       if: contains('main 3.6.x', github.base_ref)
-      uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018 # tag=v3
+      uses: actions/setup-java@b36c23c0d998641eff861008f374ee103c25ac73 # tag=v3
       with:
         distribution: 'jdkfile'
         java-version: 9.0.4
         jdkFile: /opt/openjdk/java9/OpenJDK9U-jdk_x64_linux_hotspot_9.0.4_11.tar.gz
     - name: Setup JDK 21
       if: contains('main 3.6.x', github.base_ref)
-      uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018 # tag=v3
+      uses: actions/setup-java@b36c23c0d998641eff861008f374ee103c25ac73 # tag=v3
       with:
         distribution: 'temurin'
         java-version: 21
     - name: Setup JDK 8
-      uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018 # tag=v3
+      uses: actions/setup-java@b36c23c0d998641eff861008f374ee103c25ac73 # tag=v3
       with:
         distribution: 'temurin'
         java-version: 8
@@ -201,19 +201,19 @@ jobs:
       shell: bash
     - name: Setup JDK 9
       if: contains('main 3.6.x', github.base_ref)
-      uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018 # tag=v3
+      uses: actions/setup-java@b36c23c0d998641eff861008f374ee103c25ac73 # tag=v3
       with:
         distribution: 'jdkfile'
         java-version: 9.0.4
         jdkFile: /opt/openjdk/java9/OpenJDK9U-jdk_x64_linux_hotspot_9.0.4_11.tar.gz
     - name: Setup JDK 21
       if: contains('main 3.6.x', github.base_ref)
-      uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018 # tag=v3
+      uses: actions/setup-java@b36c23c0d998641eff861008f374ee103c25ac73 # tag=v3
       with:
         distribution: 'temurin'
         java-version: 21
     - name: Setup JDK 8
-      uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018 # tag=v3
+      uses: actions/setup-java@b36c23c0d998641eff861008f374ee103c25ac73 # tag=v3
       with:
         distribution: 'temurin'
         java-version: 8
diff --git a/.github/workflows/snapshots.yml b/.github/workflows/snapshots.yml
index df92c67a61..eeb718c1d0 100644
--- a/.github/workflows/snapshots.yml
+++ b/.github/workflows/snapshots.yml
@@ -29,19 +29,19 @@ jobs:
         shell: bash
       - name: Setup Java 9
         if: contains('main 3.6.x', matrix.branch)
-        uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018 # tag=v3
+        uses: actions/setup-java@b36c23c0d998641eff861008f374ee103c25ac73 # tag=v3
         with:
           distribution: 'jdkfile'
           java-version: 9.0.4
           jdkFile: /opt/openjdk/java9/OpenJDK9U-jdk_x64_linux_hotspot_9.0.4_11.tar.gz
       - name: Setup Java 21
         if: contains('main 3.6.x', matrix.branch)
-        uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018 # tag=v3
+        uses: actions/setup-java@b36c23c0d998641eff861008f374ee103c25ac73 # tag=v3
         with:
           distribution: 'temurin'
           java-version: 21
       - name: Setup Java 8
-        uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018 # tag=v3
+        uses: actions/setup-java@b36c23c0d998641eff861008f374ee103c25ac73 # tag=v3
         with:
           distribution: 'temurin'
           java-version: 8