diff --git a/.github/workflows/coverage.yml b/.github/workflows/coverage.yml
index 95b6f33..1a41088 100644
--- a/.github/workflows/coverage.yml
+++ b/.github/workflows/coverage.yml
@@ -37,7 +37,7 @@ jobs:
         restore-keys: |
           ${{ runner.os }}-maven-
     - name: Set up JDK ${{ matrix.java }}
-      uses: actions/setup-java@v3
+      uses: actions/setup-java@v3.5.1
       with:
         distribution: 'temurin'
         java-version: ${{ matrix.java }}
diff --git a/.github/workflows/maven.yml b/.github/workflows/maven.yml
index cd861ff..0367880 100644
--- a/.github/workflows/maven.yml
+++ b/.github/workflows/maven.yml
@@ -39,7 +39,7 @@ jobs:
         restore-keys: |
           ${{ runner.os }}-maven-
     - name: Set up JDK ${{ matrix.java }}
-      uses: actions/setup-java@v3
+      uses: actions/setup-java@v3.5.1
       with:
         distribution: 'temurin'
         java-version: ${{ matrix.java }}
diff --git a/src/changes/changes.xml b/src/changes/changes.xml
index 01a72a1..fa1006c 100644
--- a/src/changes/changes.xml
+++ b/src/changes/changes.xml
@@ -74,7 +74,7 @@ The <action> type attribute can be add,update,fix,remove.
         Bump actions/checkout from 2.3.1 to 3.0.2, #24, #63, #75.
       </action>
       <action dev="ggregory" type="update" due-to="Dependabot, Gary Gregory">
-        Bump actions/setup-java from 1.4.0 to 3, #21.
+        Bump actions/setup-java from 1.4.0 to 3.5.1 #21.
       </action>
       <action dev="ggregory" type="update" due-to="Dependabot, Gary Gregory">
         Bump junit from 3.8.1 to 5.9.1 Vintage #23, #38.