diff --git a/.github/workflows/build-kdoc.yml b/.github/workflows/build-kdoc.yml
index 3faa9ba..f15ff38 100644
--- a/.github/workflows/build-kdoc.yml
+++ b/.github/workflows/build-kdoc.yml
@@ -17,7 +17,7 @@ jobs:
       - uses: actions/checkout@v7
         with:
           submodules: recursive   # translations live in the l10n submodule
-      - uses: actions/setup-java@v5.6.0
+      - uses: actions/setup-java@v6.0.0
         with:
           distribution: temurin
           java-version: 21   # keep in sync with gradle/gradle-daemon-jvm.properties
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index d9de93c..f9576d3 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -14,6 +14,6 @@ jobs:
         submodules: recursive   # translations live in the l10n submodule
 
     - name: Analyze code with CodeQL
-      uses: github/codeql-action/analyze@v4.37.3
+      uses: github/codeql-action/analyze@v4.37.9
       with:
         category: "security"
\ No newline at end of file
diff --git a/.github/workflows/test-dev.yml b/.github/workflows/test-dev.yml
index 49dba74..75ca2b1 100644
--- a/.github/workflows/test-dev.yml
+++ b/.github/workflows/test-dev.yml
@@ -12,7 +12,7 @@ jobs:
       - uses: actions/checkout@v7
         with:
           submodules: recursive   # translations live in the l10n submodule
-      - uses: actions/setup-java@v5.6.0
+      - uses: actions/setup-java@v6.0.0
         with:
           distribution: temurin
           java-version: 21   # keep in sync with gradle/gradle-daemon-jvm.properties
@@ -29,7 +29,7 @@ jobs:
       - uses: actions/checkout@v7
         with:
           submodules: recursive   # translations live in the l10n submodule
-      - uses: actions/setup-java@v5.6.0
+      - uses: actions/setup-java@v6.0.0
         with:
           distribution: temurin
           java-version: 21   # keep in sync with gradle/gradle-daemon-jvm.properties