diff --git a/.github/workflows/java-release.yml b/.github/workflows/java-release.yml
index 9eeaa228..8ce09e24 100644
--- a/.github/workflows/java-release.yml
+++ b/.github/workflows/java-release.yml
@@ -26,7 +26,7 @@ jobs:
       id-token: write # to sign with sigstore
     steps:
       - name: checkout tag
-        uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2
+        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
 
       - name: Set up JDK 11
         uses: actions/setup-java@99b8673ff64fbf99d8d325f52d9a5bdedb8483e9 # v4.2.1