diff --git a/.github/workflows/build-apps.yml b/.github/workflows/build-apps.yml
index 38f1dd23..f305fbfc 100644
--- a/.github/workflows/build-apps.yml
+++ b/.github/workflows/build-apps.yml
@@ -72,7 +72,7 @@ jobs:
         # ubuntu-26.04 defaults to JDK 25, which breaks the RN/AGP native build
         # (Kotlin falls back to JVM_23, the foojay toolchain + CMake configure
         # fail). Pin Temurin 17 for a deterministic Android build.
-        uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
+        uses: actions/setup-java@ad2b38190b15e4d6bdf0c97fb4fca8412226d287 # v5.3.0
         with:
           distribution: temurin
           java-version: "17"
@@ -168,7 +168,7 @@ jobs:
         # ubuntu-26.04 defaults to JDK 25, which breaks the RN/AGP native build
         # (Kotlin falls back to JVM_23, the foojay toolchain + CMake configure
         # fail). Pin Temurin 17 for a deterministic Android build.
-        uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
+        uses: actions/setup-java@ad2b38190b15e4d6bdf0c97fb4fca8412226d287 # v5.3.0
         with:
           distribution: temurin
           java-version: "17"