diff --git a/.github/workflows/analysis.yml b/.github/workflows/analysis.yml
index 2a3612fd8a..887d9792a9 100644
--- a/.github/workflows/analysis.yml
+++ b/.github/workflows/analysis.yml
@@ -57,7 +57,7 @@ jobs:
                     repository: ${{ steps.get-vars.outputs.repo }}
                     ref: ${{ steps.get-vars.outputs.branch }}
             -   name: Set up JDK 21
-                uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 # v5.4.0
+                uses: actions/setup-java@0f481fcb613427c0f801b606911222b5b6f3083a # v5.5.0
                 with:
                     distribution: "temurin"
                     java-version: 21
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 686d2e997a..2b2313c111 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -47,7 +47,7 @@ jobs:
         with:
           languages: ${{ matrix.language }}
       - name: Set up JDK 21
-        uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 # v5.4.0
+        uses: actions/setup-java@0f481fcb613427c0f801b606911222b5b6f3083a # v5.5.0
         with:
           distribution: "temurin"
           java-version: 21
diff --git a/.github/workflows/pr-feedback.yml b/.github/workflows/pr-feedback.yml
index a3a2d1296c..38bfe84772 100644
--- a/.github/workflows/pr-feedback.yml
+++ b/.github/workflows/pr-feedback.yml
@@ -36,7 +36,7 @@ jobs:
           blocklist=$(curl https://raw.githubusercontent.com/nextcloud/.github/master/non-community-usernames.txt | paste -s -d, -)
           echo "blocklist=$blocklist" >> "$GITHUB_OUTPUT"
 
-      - uses: nextcloud/pr-feedback-action@5227c55be184087d0aef6338bee210d8620b6297 # main
+      - uses: nextcloud/pr-feedback-action@4709fa5b3e1821559d4c312ef937b61f1567aa44 # main
         with:
           feedback-message: |
             Hello there,
diff --git a/.github/workflows/qa.yml b/.github/workflows/qa.yml
index 263977d0d3..d67ecbc87d 100644
--- a/.github/workflows/qa.yml
+++ b/.github/workflows/qa.yml
@@ -30,7 +30,7 @@ jobs:
           persist-credentials: false
 
       - name: set up JDK 21
-        uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 # v5.4.0
+        uses: actions/setup-java@0f481fcb613427c0f801b606911222b5b6f3083a # v5.5.0
         if: ${{ steps.check-secrets.outputs.ok == 'true' }}
         with:
           distribution: "temurin"