diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index ccce7c8..c895200 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -20,7 +20,7 @@ jobs:
           java-version: '21'
           distribution: temurin
 
-      - uses: gradle/actions/setup-gradle@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0
+      - uses: gradle/actions/setup-gradle@3f5f9adaf7d9fecd50b5935e54106014257a94e6 # v6.4.0
 
       # `build` and nothing more.
       # `jmh` needs corpus files that are fetched rather than committed,