diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index 6f2848e..559a20d 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -29,10 +29,10 @@ jobs:
       fail-fast: false
     runs-on: ${{ matrix.os.image }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - run: echo " " >> pom.xml # make sure the cache is slightly different for these runners
       - name: Set up JDK
-        uses: actions/setup-java@v5
+        uses: actions/setup-java@v5.6.0
         with:
           java-version: ${{ matrix.jdk }}
           distribution: 'temurin'
@@ -46,17 +46,17 @@ jobs:
           DELAY_FACTOR: 3
 
       - name: Upload coverage to Codecov
-        uses: codecov/codecov-action@v6
+        uses: codecov/codecov-action@v7
         env:
           CODECOV_TOKEN: ${{ secrets.CODECOV_ORG_TOKEN }}
 
   checker-framework:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - run: echo "  " >> pom.xml # make sure the cache is slightly different for the checker framework
       - name: Set up JDK 11
-        uses: actions/setup-java@v5
+        uses: actions/setup-java@v5.6.0
         with:
           java-version: 11
           distribution: 'temurin'
@@ -67,9 +67,9 @@ jobs:
   lint:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - name: Set up JDK 11
-        uses: actions/setup-java@v5
+        uses: actions/setup-java@v5.6.0
         with:
           java-version: 11
           distribution: 'temurin'
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index f4fb5c2..975a033 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -9,12 +9,12 @@ jobs:
   publish:
     runs-on: macos-latest # for now build on macos for the jni
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       # build jni libs on osx
       - run: ./update-rust-jni-libs.sh -r
 
-      - uses: actions/setup-java@v5
+      - uses: actions/setup-java@v5.6.0
         with:
           java-version: '11'
           distribution: 'temurin'