diff --git a/.github/workflows/merge.yml b/.github/workflows/merge.yml
index bb8380bb..8a33cde6 100644
--- a/.github/workflows/merge.yml
+++ b/.github/workflows/merge.yml
@@ -22,7 +22,7 @@ jobs:
     steps:
     - uses: actions/checkout@6d193bf28034eafb982f37bd894289fe649468fc
     - name: Set up JDK 8
-      uses: actions/setup-java@0a40ce6f61952eeee640a8940ea8050407c06cb5
+      uses: actions/setup-java@40b9536ce5efadffec365e30f26f62a3640d2548
       with:
         java-version: '8'
         distribution: 'temurin'
diff --git a/.github/workflows/pullrequest.yml b/.github/workflows/pullrequest.yml
index c8e33806..3490ffed 100644
--- a/.github/workflows/pullrequest.yml
+++ b/.github/workflows/pullrequest.yml
@@ -13,14 +13,14 @@ jobs:
         uses: actions/checkout@6d193bf28034eafb982f37bd894289fe649468fc
 
       - name: Set up JDK 8
-        uses: actions/setup-java@0a40ce6f61952eeee640a8940ea8050407c06cb5
+        uses: actions/setup-java@40b9536ce5efadffec365e30f26f62a3640d2548
         with:
           java-version: '8'
           distribution: 'temurin'
           cache: maven
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@64431c66d0e98a26d34f9485e5f8e317e14956fc
+        uses: github/codeql-action/init@799e477cb3a9d4bd3fd1771bf9ffcf3445401cd8
         with:
           languages: java
 
@@ -45,4 +45,4 @@ jobs:
           verbose: true # optional (default = false)
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@64431c66d0e98a26d34f9485e5f8e317e14956fc
+        uses: github/codeql-action/analyze@799e477cb3a9d4bd3fd1771bf9ffcf3445401cd8
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index d095ec90..f0df52a4 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -31,7 +31,7 @@ jobs:
         uses: actions/checkout@6d193bf28034eafb982f37bd894289fe649468fc
       - name: Set up JDK 8
         if: ${{ steps.release.outputs.release_created }}
-        uses: actions/setup-java@0a40ce6f61952eeee640a8940ea8050407c06cb5
+        uses: actions/setup-java@40b9536ce5efadffec365e30f26f62a3640d2548
         with:
           java-version: '8'
           distribution: 'temurin'
diff --git a/.github/workflows/static-code-scanning.yaml b/.github/workflows/static-code-scanning.yaml
index c9f39796..fb8caae2 100644
--- a/.github/workflows/static-code-scanning.yaml
+++ b/.github/workflows/static-code-scanning.yaml
@@ -33,12 +33,12 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@64431c66d0e98a26d34f9485e5f8e317e14956fc
+        uses: github/codeql-action/init@799e477cb3a9d4bd3fd1771bf9ffcf3445401cd8
         with:
           languages: java
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@64431c66d0e98a26d34f9485e5f8e317e14956fc
+        uses: github/codeql-action/autobuild@799e477cb3a9d4bd3fd1771bf9ffcf3445401cd8
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@64431c66d0e98a26d34f9485e5f8e317e14956fc
+        uses: github/codeql-action/analyze@799e477cb3a9d4bd3fd1771bf9ffcf3445401cd8
diff --git a/pom.xml b/pom.xml
index 069ae2b7..d6b78f0c 100644
--- a/pom.xml
+++ b/pom.xml
@@ -172,7 +172,7 @@
       <dependency>
         <groupId>io.cucumber</groupId>
         <artifactId>cucumber-bom</artifactId>
-        <version>7.18.1</version>
+        <version>7.19.0</version>
         <type>pom</type>
         <scope>import</scope>
       </dependency>