diff --git a/.github/workflows/build_sdk.yml b/.github/workflows/build_sdk.yml
index d80396309..c5209d170 100644
--- a/.github/workflows/build_sdk.yml
+++ b/.github/workflows/build_sdk.yml
@@ -110,7 +110,7 @@ jobs:
         # If the worktree is dirty and this is a Renovate PR to bump
         # dependencies, commit the updated SDK and push it back to the PR. The
         # job will still be marked as a failure.
-        if: failure() && steps.worktreeClean.outcome == 'failure' && contains(github.actor, 'renovate') && github.event_name == 'pull_request'
+        if: steps.worktreeClean.outcome == 'failure' && contains(github.actor, 'renovate') && github.event_name == 'pull_request'
         shell: bash
         run: |
           git diff --quiet -- sdk && echo "no changes to sdk" && exit
diff --git a/.github/workflows/verify-release.yml b/.github/workflows/verify-release.yml
index 00d54b02c..656f53c96 100644
--- a/.github/workflows/verify-release.yml
+++ b/.github/workflows/verify-release.yml
@@ -76,7 +76,7 @@ jobs:
         with:
           python-version: 3.11.8
       - name: Setup Java
-        uses: actions/setup-java@dded0888837ed1f317902acf8a20df0ad188d165 # v5.0.0
+        uses: actions/setup-java@f2beeb24e141e01a676f977032f5a29d81c9e27e # v5.1.0
         with:
           cache: gradle
           distribution: temurin