diff --git a/.github/workflows/codeql.ci.yml b/.github/workflows/codeql.ci.yml
index b58bd6a..8e11148 100644
--- a/.github/workflows/codeql.ci.yml
+++ b/.github/workflows/codeql.ci.yml
@@ -32,7 +32,7 @@ jobs:
         with:
           config-file: ./.github/codeql/codeql-config.yml
       - name: "Gradle Build"
-        uses: gradle/gradle-build-action@8baac4c8ef753599f92eeb509c246d09d6250fa6 # v3.3.0
+        uses: gradle/gradle-build-action@4c39dd82cd5e1ec7c6fa0173bb41b4b6bb3b86ff # v3.3.2
         id: gradlebuild
         continue-on-error: ${{ inputs.experimental }}
         with:
diff --git a/.github/workflows/step.publish.yml b/.github/workflows/step.publish.yml
index 878aa61..65c9fea 100644
--- a/.github/workflows/step.publish.yml
+++ b/.github/workflows/step.publish.yml
@@ -182,7 +182,7 @@ jobs:
         with:
           java-version: '21'
       - name: "Publish (${{ matrix.label }})"
-        uses: gradle/gradle-build-action@8baac4c8ef753599f92eeb509c246d09d6250fa6 # v3.3.0
+        uses: gradle/gradle-build-action@4c39dd82cd5e1ec7c6fa0173bb41b4b6bb3b86ff # v3.3.2
         id: publish
         with:
           cache-read-only: true