diff --git a/.github/actions/build-test-pack-deploy/action.yml b/.github/actions/build-test-pack-deploy/action.yml
index 222f238..90cf614 100644
--- a/.github/actions/build-test-pack-deploy/action.yml
+++ b/.github/actions/build-test-pack-deploy/action.yml
@@ -34,6 +34,24 @@ runs:
         server-username: MAVEN_CENTRAL_USERNAME
         server-password: MAVEN_CENTRAL_PASSWORD
 
+    # Pin Maven instead of using the runner image's version. Bundles built with Maven 3.10.0
+    # (ubuntu-latest image 20261004.327.1) fail Maven Central validation.
+    - name: Setup Maven
+      shell: bash
+      env:
+        MAVEN_VERSION: "3.9.16"
+        MAVEN_SHA512: "831a8591fe20c8243b1dbe7d71e3244f31d1665b0804b2e825e38cbbe5ce0cafb8338851f90780735568773e0a6cd07bbec107cda0b896b008b861075358b6f6"
+      run: |
+        ARCHIVE="$RUNNER_TEMP/apache-maven-$MAVEN_VERSION-bin.tar.gz"
+        curl -fsSL --retry 3 -o "$ARCHIVE" "https://archive.apache.org/dist/maven/maven-3/$MAVEN_VERSION/binaries/apache-maven-$MAVEN_VERSION-bin.tar.gz"
+        echo "$MAVEN_SHA512  $ARCHIVE" | sha512sum -c -
+        tar -xzf "$ARCHIVE" -C "$RUNNER_TEMP"
+        echo "$RUNNER_TEMP/apache-maven-$MAVEN_VERSION/bin" >> "$GITHUB_PATH"
+
+    - name: Show Maven version
+      shell: bash
+      run: mvn -v
+
     - name: Compute version
       id: version
       shell: bash