diff --git a/.github/workflows/coverage.yml b/.github/workflows/coverage.yml
index 95b6f336e..1a4108880 100644
--- a/.github/workflows/coverage.yml
+++ b/.github/workflows/coverage.yml
@@ -37,7 +37,7 @@ jobs:
         restore-keys: |
           ${{ runner.os }}-maven-
     - name: Set up JDK ${{ matrix.java }}
-      uses: actions/setup-java@v3
+      uses: actions/setup-java@v3.5.1
       with:
         distribution: 'temurin'
         java-version: ${{ matrix.java }}
diff --git a/.github/workflows/maven.yml b/.github/workflows/maven.yml
index 9aea18a0b..3141aa3bb 100644
--- a/.github/workflows/maven.yml
+++ b/.github/workflows/maven.yml
@@ -39,7 +39,7 @@ jobs:
         restore-keys: |
           ${{ runner.os }}-maven-
     - name: Set up JDK ${{ matrix.java }}
-      uses: actions/setup-java@v3
+      uses: actions/setup-java@v3.5.1
       with:
         distribution: 'temurin'
         java-version: ${{ matrix.java }}
diff --git a/src/changes/changes.xml b/src/changes/changes.xml
index e31cd8a5e..540ec6f98 100644
--- a/src/changes/changes.xml
+++ b/src/changes/changes.xml
@@ -151,7 +151,7 @@
       Bump actions/cache from 2 to 3.0.9 #214 #225 #239 #266 #294, #342.
     </action>
     <action type="update" dev="kinow" due-to="Dependabot, Gary Gregory">
-      Bump actions/setup-java from 1.4.0 to 3 #174 #177 #186 #224 #298.
+      Bump actions/setup-java from 1.4.0 to 3.5.1 #174 #177 #186 #224 #298.
     </action>
     <action type="update" dev="ggregory" due-to="Dependabot, Gary Gregory">
       Bump actions/checkout from 1 to 3.0.2 #166 #173 #183 #193 #262 #264 #285.