diff --git a/.github/workflows/benchmark-jvm.yml b/.github/workflows/benchmark-jvm.yml
index cf59073a31..6a10fec6cf 100644
--- a/.github/workflows/benchmark-jvm.yml
+++ b/.github/workflows/benchmark-jvm.yml
@@ -75,7 +75,7 @@ jobs:
     steps:
       - uses: actions/checkout@v7.0.0
       - name: set up jdk 25
-        uses: actions/setup-java@v5.5.0
+        uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5.6.0
         with:
           java-version: 25
           distribution: adopt
diff --git a/.github/workflows/docs-jvm.yml b/.github/workflows/docs-jvm.yml
index ce66220b8d..b207a3c6cb 100644
--- a/.github/workflows/docs-jvm.yml
+++ b/.github/workflows/docs-jvm.yml
@@ -15,7 +15,7 @@ jobs:
     steps:
       - uses: actions/checkout@v7.0.0
       - name: set up jdk 25
-        uses: actions/setup-java@v5.5.0
+        uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5.6.0
         with:
           java-version: 25
           distribution: adopt
diff --git a/.github/workflows/interop.yml b/.github/workflows/interop.yml
index b8e5e33253..5a23c0278c 100644
--- a/.github/workflows/interop.yml
+++ b/.github/workflows/interop.yml
@@ -16,7 +16,7 @@ jobs:
     steps:
       - uses: actions/checkout@v7.0.0
       - name: set up jdk 25
-        uses: actions/setup-java@v5.5.0
+        uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5.6.0
         with:
           java-version: 25
           distribution: adopt
diff --git a/.github/workflows/kotlin-check.yml b/.github/workflows/kotlin-check.yml
index 9be10d85cf..46e743294b 100644
--- a/.github/workflows/kotlin-check.yml
+++ b/.github/workflows/kotlin-check.yml
@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: set up jdk 25
-        uses: actions/setup-java@v5.5.0
+        uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5.6.0
         with:
           java-version: 25
           distribution: adopt
diff --git a/.github/workflows/package-android.yml b/.github/workflows/package-android.yml
index 33eabd7953..892db7532a 100644
--- a/.github/workflows/package-android.yml
+++ b/.github/workflows/package-android.yml
@@ -14,7 +14,7 @@ jobs:
     steps:
       - uses: actions/checkout@v7.0.0
       - name: set up jdk 25
-        uses: actions/setup-java@v5.5.0
+        uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5.6.0
         with:
           java-version: 25
           distribution: adopt
diff --git a/.github/workflows/prepare-publish-android.yml b/.github/workflows/prepare-publish-android.yml
index 701e5d39fe..13a5ace0ef 100644
--- a/.github/workflows/prepare-publish-android.yml
+++ b/.github/workflows/prepare-publish-android.yml
@@ -33,7 +33,7 @@ jobs:
     steps:
       - uses: actions/checkout@v7.0.0
       - name: set up jdk 25
-        uses: actions/setup-java@v5.5.0
+        uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5.6.0
         with:
           java-version: 25
           distribution: adopt
diff --git a/.github/workflows/prepare-publish-jvm.yml b/.github/workflows/prepare-publish-jvm.yml
index b67232214f..f705449d32 100644
--- a/.github/workflows/prepare-publish-jvm.yml
+++ b/.github/workflows/prepare-publish-jvm.yml
@@ -33,7 +33,7 @@ jobs:
     steps:
       - uses: actions/checkout@v7.0.0
       - name: set up jdk 25
-        uses: actions/setup-java@v5.5.0
+        uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5.6.0
         with:
           java-version: 25
           distribution: adopt
diff --git a/.github/workflows/prepare-publish-kmp.yml b/.github/workflows/prepare-publish-kmp.yml
index 6b43687d48..75fff9039b 100644
--- a/.github/workflows/prepare-publish-kmp.yml
+++ b/.github/workflows/prepare-publish-kmp.yml
@@ -33,7 +33,7 @@ jobs:
     steps:
       - uses: actions/checkout@v7.0.0
       - name: set up jdk 25
-        uses: actions/setup-java@v5.5.0
+        uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5.6.0
         with:
           java-version: 25
           distribution: adopt
diff --git a/.github/workflows/test-android.yml b/.github/workflows/test-android.yml
index 842521ba32..0ce7207af2 100644
--- a/.github/workflows/test-android.yml
+++ b/.github/workflows/test-android.yml
@@ -16,7 +16,7 @@ jobs:
     steps:
       - uses: actions/checkout@v7.0.0
       - name: set up jdk 25
-        uses: actions/setup-java@v5.5.0
+        uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5.6.0
         with:
           java-version: 25
           distribution: adopt
diff --git a/.github/workflows/test-jvm.yml b/.github/workflows/test-jvm.yml
index 2e2cbd4282..5f20154d90 100644
--- a/.github/workflows/test-jvm.yml
+++ b/.github/workflows/test-jvm.yml
@@ -16,7 +16,7 @@ jobs:
     steps:
       - uses: actions/checkout@v7.0.0
       - name: set up jdk 25
-        uses: actions/setup-java@v5.5.0
+        uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5.6.0
         with:
           java-version: 25
           distribution: adopt
diff --git a/.github/workflows/test-kmp.yml b/.github/workflows/test-kmp.yml
index c465176fbf..2a2d813c1e 100644
--- a/.github/workflows/test-kmp.yml
+++ b/.github/workflows/test-kmp.yml
@@ -19,7 +19,7 @@ jobs:
     steps:
       - uses: actions/checkout@v7.0.0
       - name: set up jdk 25
-        uses: actions/setup-java@v5.5.0
+        uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5.6.0
         with:
           java-version: 25
           distribution: adopt