diff --git a/.github/workflows/android.yml b/.github/workflows/android.yml
index ef16fa74..ca5a9d7d 100644
--- a/.github/workflows/android.yml
+++ b/.github/workflows/android.yml
@@ -33,7 +33,7 @@ jobs:
 
       # Pinned to a commit SHA (same pin as wrapper-validation.yml).
       - name: Set up Gradle
-        uses: gradle/actions/setup-gradle@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0
+        uses: gradle/actions/setup-gradle@3f5f9adaf7d9fecd50b5935e54106014257a94e6 # v6.4.0
         with:
           cache-read-only: ${{ github.ref != 'refs/heads/master' }}
 
@@ -82,7 +82,7 @@ jobs:
           distribution: temurin
 
       - name: Set up Gradle
-        uses: gradle/actions/setup-gradle@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0
+        uses: gradle/actions/setup-gradle@3f5f9adaf7d9fecd50b5935e54106014257a94e6 # v6.4.0
         with:
           cache-read-only: true
 
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 76da1792..ef9ec72f 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -37,7 +37,7 @@ jobs:
       # and a warm build cache makes every compileKotlin task FROM-CACHE, which
       # ends in "CodeQL could not process any code written in Java/Kotlin".
       - name: Set up Gradle
-        uses: gradle/actions/setup-gradle@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0
+        uses: gradle/actions/setup-gradle@3f5f9adaf7d9fecd50b5935e54106014257a94e6 # v6.4.0
         with:
           cache-read-only: true
 
diff --git a/.github/workflows/wrapper-validation.yml b/.github/workflows/wrapper-validation.yml
index 3c1b672e..aa0eed3d 100644
--- a/.github/workflows/wrapper-validation.yml
+++ b/.github/workflows/wrapper-validation.yml
@@ -19,4 +19,4 @@ jobs:
     steps:
       - uses: actions/checkout@v7
       # Pinned to a commit SHA (third-party action).
-      - uses: gradle/actions/wrapper-validation@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0
+      - uses: gradle/actions/wrapper-validation@3f5f9adaf7d9fecd50b5935e54106014257a94e6 # v6.4.0