diff --git a/.github/workflows/build-aws-sdk-p2.yml b/.github/workflows/build-aws-sdk-p2.yml
index a5c91290e41..12bd1853853 100644
--- a/.github/workflows/build-aws-sdk-p2.yml
+++ b/.github/workflows/build-aws-sdk-p2.yml
@@ -49,14 +49,14 @@ jobs:
           distribution: 'temurin' # See 'Supported distributions' for available options
           java-version: '17'
           mvn-toolchain-id: 'JavaSE-17'
-      - name: Pin Apache Maven to 3.9.11
+      - name: Pin Apache Maven to 3.9.16
         # Tycho 4.0.x requires the Maven 3.9.x line; the GitHub runner image's default
         # Maven floats and bumped to 3.10.0, which breaks Tycho's Sisu/Guice component
         # wiring. Pin a known-good 3.9.x so the build no longer depends on the runner
         # image's default.
         uses: stCarolas/setup-maven@12eb41b233df95d49b0c11fc1b5bc8312e5d4ce0 # v5.1
         with:
-          maven-version: 3.9.11
+          maven-version: 3.9.16
       - shell: bash
         env: # Or as an environment variable
           TMP: /mnt/tmp
diff --git a/.github/workflows/build-jetty-p2.yml b/.github/workflows/build-jetty-p2.yml
index 27ec57eb466..dfd817297d7 100644
--- a/.github/workflows/build-jetty-p2.yml
+++ b/.github/workflows/build-jetty-p2.yml
@@ -16,14 +16,14 @@ jobs:
         with:
           distribution: temurin
           java-version: 21
-      - name: Pin Apache Maven to 3.9.11
+      - name: Pin Apache Maven to 3.9.16
         # Tycho 4.0.x requires the Maven 3.9.x line; the GitHub runner image's default
         # Maven floats and bumped to 3.10.0, which breaks Tycho's Sisu/Guice component
         # wiring. Pin a known-good 3.9.x so the build no longer depends on the runner
         # image's default.
         uses: stCarolas/setup-maven@12eb41b233df95d49b0c11fc1b5bc8312e5d4ce0 # v5.1
         with:
-          maven-version: 3.9.11
+          maven-version: 3.9.16
       - name: Check out the repository to the runner
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
diff --git a/.github/workflows/build-sailing-base-p2.yml b/.github/workflows/build-sailing-base-p2.yml
index ce40bc9c0d3..837e5b651d4 100644
--- a/.github/workflows/build-sailing-base-p2.yml
+++ b/.github/workflows/build-sailing-base-p2.yml
@@ -30,14 +30,14 @@ jobs:
           distribution: 'temurin' # See 'Supported distributions' for available options
           java-version: '17'
           mvn-toolchain-id: 'JavaSE-17'
-      - name: Pin Apache Maven to 3.9.11
+      - name: Pin Apache Maven to 3.9.16
         # Tycho 4.0.x requires the Maven 3.9.x line; the GitHub runner image's default
         # Maven floats and bumped to 3.10.0, which breaks Tycho's Sisu/Guice component
         # wiring. Pin a known-good 3.9.x so the build no longer depends on the runner
         # image's default.
         uses: stCarolas/setup-maven@12eb41b233df95d49b0c11fc1b5bc8312e5d4ce0 # v5.1
         with:
-          maven-version: 3.9.11
+          maven-version: 3.9.16
       - shell: bash
         env: # Or as an environment variable
           TMP: /mnt/tmp
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index f96c7c2d97d..0a1dab8b66f 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -189,14 +189,14 @@ jobs:
           distribution: 'temurin' # See 'Supported distributions' for available options
           java-version: '25'
           mvn-toolchain-id: 'JavaSE-25'
-      - name: Pin Apache Maven to 3.9.11
+      - name: Pin Apache Maven to 3.9.16
         # Tycho 4.0.x requires the Maven 3.9.x line; the GitHub runner image's default
         # Maven floats and bumped to 3.10.0, which breaks Tycho's Sisu/Guice component
         # wiring ("No implementation for MavenTargetLocationFactory was bound"). Pin a
         # known-good 3.9.x so the build no longer depends on the runner image's default.
         uses: stCarolas/setup-maven@12eb41b233df95d49b0c11fc1b5bc8312e5d4ce0 # v5.1
         with:
-          maven-version: 3.9.11
+          maven-version: 3.9.16
       - name: Setup Android SDK
         uses: android-actions/setup-android@40fd30fb8d7440372e1316f5d1809ec01dcd3699 # v4.0.1
         with: