diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 729163f4..417117eb 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -36,9 +36,10 @@ jobs:
         java-version: '21'
 
     - name: Setup Gradle
-      uses: gradle/actions/setup-gradle@v4
+      uses: gradle/actions/setup-gradle@v6
       with:
         validate-wrappers: true
+        cache-provider: basic # keep 100% MIT — avoid proprietary gradle-actions-caching
 
     - name: Grant Execute Permission for Gradlew
       run: chmod +x gradlew