diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index aed737e2..43f1dc55 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -22,7 +22,7 @@ jobs:
       with:
         distribution: 'temurin'
         java-version: '25'
-    - uses: gradle/actions/setup-gradle@v5
+    - uses: gradle/actions/setup-gradle@v5.0.2
     - name: Build with Gradle
       run: ./gradlew build
     - name: Publish Test Report
diff --git a/.github/workflows/compat-17.yml b/.github/workflows/compat-17.yml
index ca90b38b..7bbf5621 100644
--- a/.github/workflows/compat-17.yml
+++ b/.github/workflows/compat-17.yml
@@ -18,6 +18,6 @@ jobs:
       with:
         distribution: 'temurin'
         java-version: '17'
-    - uses: gradle/actions/setup-gradle@v5
+    - uses: gradle/actions/setup-gradle@v5.0.2
     - name: Build with Gradle
       run: ./gradlew lib:jar
diff --git a/.github/workflows/dependency-submission.yml b/.github/workflows/dependency-submission.yml
index 2eac0e6d..3bfeeb97 100644
--- a/.github/workflows/dependency-submission.yml
+++ b/.github/workflows/dependency-submission.yml
@@ -22,4 +22,4 @@ jobs:
           distribution: 'temurin'
           java-version: '25'
       - name: Generate and submit dependency graph
-        uses: gradle/actions/dependency-submission@v5
+        uses: gradle/actions/dependency-submission@v5.0.2
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 453d2a1b..6c033dca 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -23,7 +23,7 @@ jobs:
           distribution: 'temurin'
           java-version: '25'
       - name: Setup Gradle
-        uses: gradle/actions/setup-gradle@4d9f0ba0025fe599b4ebab900eb7f3a1d93ef4c2 # v5.0.0
+        uses: gradle/actions/setup-gradle@0723195856401067f7a2779048b490ace7a47d7c # v5.0.2
       - name: Run JReleaser
         run: ./gradlew -Dorg.gradle.configuration-cache=false publish jreleaserRelease
         env: