diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index af4a714..909269d 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -11,7 +11,7 @@ jobs:
           fetch-depth: 2
           # required by release-tag.sh to allow pushing with another credentials so other workflows are triggered
           persist-credentials: false
-      - uses: actions/setup-java@v4.6.0
+      - uses: actions/setup-java@v4.7.0
         with:
           distribution: temurin
           java-version: 21
diff --git a/.github/workflows/refresh_versions.yml b/.github/workflows/refresh_versions.yml
index 0de1558..6148df3 100644
--- a/.github/workflows/refresh_versions.yml
+++ b/.github/workflows/refresh_versions.yml
@@ -17,7 +17,7 @@ jobs:
         with:
           ref: main
       - name: setup-java
-        uses: actions/setup-java@v4.6.0
+        uses: actions/setup-java@v4.7.0
         with:
           distribution: temurin
           java-version: 21