diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml
index 1f4ed8d..3c547ba 100644
--- a/.github/workflows/codeql.yaml
+++ b/.github/workflows/codeql.yaml
@@ -39,7 +39,7 @@ jobs:
           # To support newer Go
           # CodeQL/GitHub uses older Go (1.20?) by default
           go-version-file: go.mod
-      - uses: actions/setup-java@f2beeb24e141e01a676f977032f5a29d81c9e27e # v5.1.0
+      - uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
         if: ${{ inputs.language == 'java' || inputs.language == 'java-kotlin' }}
         with:
           distribution: 'temurin'