diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 1ea9d8b..53e6a4f 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -20,7 +20,7 @@ jobs:
         with:
           distribution: temurin
           java-version: '21'
-      - uses: gradle/actions/setup-gradle@v4
+      - uses: gradle/actions/setup-gradle@v6
       - name: Compile + format check
         run: ./gradlew compileJava compileTestJava spotlessCheck --stacktrace
 
@@ -33,7 +33,7 @@ jobs:
         with:
           distribution: temurin
           java-version: '21'
-      - uses: gradle/actions/setup-gradle@v4
+      - uses: gradle/actions/setup-gradle@v6
       - name: Build
         # The default build excludes the @Tag("e2e") full-stack tests (heavy image pulls); only the
         # e2e module's compileTestJava runs here, proving the e2e wiring stays sound on every PR.
@@ -71,7 +71,7 @@ jobs:
         with:
           distribution: temurin
           java-version: '21'
-      - uses: gradle/actions/setup-gradle@v4
+      - uses: gradle/actions/setup-gradle@v6
       - name: Generate CycloneDX SBOM
         run: ./gradlew cyclonedxBom --stacktrace
       - name: Upload SBOM
@@ -110,7 +110,7 @@ jobs:
         with:
           distribution: temurin
           java-version: '21'
-      - uses: gradle/actions/setup-gradle@v4
+      - uses: gradle/actions/setup-gradle@v6
       - name: Build the service boot jars
         # ComposeContainer.withBuild(true) builds the service images from these jars.
         run: ./gradlew bankJars --stacktrace
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index c4aa0d8..997e485 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -32,7 +32,7 @@ jobs:
           # 'security-and-quality' is broader than the default 'security-extended'.
           queries: security-and-quality
 
-      - uses: gradle/actions/setup-gradle@v4
+      - uses: gradle/actions/setup-gradle@v6
 
       - name: Build (no tests — CodeQL only needs compilation)
         # Compile every module so CodeQL sees all bytecode; skip the heavy Testcontainers suite.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 89f1d58..2700a42 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -18,7 +18,7 @@ jobs:
         with:
           distribution: temurin
           java-version: '21'
-      - uses: gradle/actions/setup-gradle@v4
+      - uses: gradle/actions/setup-gradle@v6
       - name: Publish (version from the tag)
         env:
           # GITHUB_TOKEN with packages:write authorizes the GitHub Packages Maven repo — no PAT needed.