diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 63974249..a7affb7a 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -36,7 +36,7 @@ jobs:
           setup_only: true
           token: ${{ secrets.BUF_TOKEN }}
       - name: Validate Gradle Wrapper
-        uses: gradle/actions/wrapper-validation@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0
+        uses: gradle/actions/wrapper-validation@3f5f9adaf7d9fecd50b5935e54106014257a94e6 # v6.4.0
       - name: Lint
         run: make lint
       - name: Generate
diff --git a/.github/workflows/conformance.yaml b/.github/workflows/conformance.yaml
index 7e135944..64e0146d 100644
--- a/.github/workflows/conformance.yaml
+++ b/.github/workflows/conformance.yaml
@@ -36,6 +36,6 @@ jobs:
           setup_only: true
           token: ${{ secrets.BUF_TOKEN }}
       - name: Validate Gradle Wrapper
-        uses: gradle/actions/wrapper-validation@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0
+        uses: gradle/actions/wrapper-validation@3f5f9adaf7d9fecd50b5935e54106014257a94e6 # v6.4.0
       - name: Test conformance
         run: make conformance
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 80989886..5e08a90e 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -33,7 +33,7 @@ jobs:
           setup_only: true
           token: ${{ secrets.BUF_TOKEN }}
       - name: Validate Gradle Wrapper
-        uses: gradle/actions/wrapper-validation@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0
+        uses: gradle/actions/wrapper-validation@3f5f9adaf7d9fecd50b5935e54106014257a94e6 # v6.4.0
       - name: Configure GPG signing & publish
         env:
           GPG_KEY: ${{ secrets.GPG_KEY }}