diff --git a/.github/workflows/build-all-and-publish.yml b/.github/workflows/build-all-and-publish.yml
index 1ea603b..c99583a 100644
--- a/.github/workflows/build-all-and-publish.yml
+++ b/.github/workflows/build-all-and-publish.yml
@@ -70,7 +70,7 @@ jobs:
         uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5
         with:
           distribution: temurin
-          java-version: '25'
+          java-version: '25.0.4+101.0.LTS'
           cache: maven
 
       - name: Install cross toolchain (if needed)
@@ -128,7 +128,7 @@ jobs:
         uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5
         with:
           distribution: temurin
-          java-version: '25'
+          java-version: '25.0.4+101.0.LTS'
           cache: maven
 
       - name: Build (native binary build only)
@@ -173,7 +173,7 @@ jobs:
         uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5
         with:
           distribution: temurin
-          java-version: '25'
+          java-version: '25.0.4+101.0.LTS'
           cache: maven
 
       # See LZ4FrameIOStreamTest
@@ -228,7 +228,7 @@ jobs:
         if: github.event_name == 'release' || inputs.publish
         with:
           distribution: temurin
-          java-version: '25'
+          java-version: '25.0.4+101.0.LTS'
           cache: maven
           gpg-private-key: ${{ secrets.GPG_KEY }}
           gpg-passphrase: GPG_PASSWORD
@@ -241,7 +241,7 @@ jobs:
         if: github.event_name != 'release' && !inputs.publish
         with:
           distribution: temurin
-          java-version: '25'
+          java-version: '25.0.4+101.0.LTS'
           cache: maven
 
       - name: Download natives
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index c50d0ab..b42302a 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -23,7 +23,7 @@ jobs:
         uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5
         with:
           distribution: temurin
-          java-version: '25'
+          java-version: '25.0.4+101.0.LTS'
           cache: maven
       - name: Install uv
         uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4 # v10.1.0
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 3f2074d..ae60919 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -40,7 +40,7 @@ jobs:
         uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5
         with:
           distribution: temurin
-          java-version: '25'
+          java-version: '25.0.4+101.0.LTS'
           cache: maven
       - name: Build (mvn verify)
         run: |