diff --git a/.github/workflows/nightly-fuzz.yml b/.github/workflows/nightly-fuzz.yml
index 8eab7a8..76eee24 100644
--- a/.github/workflows/nightly-fuzz.yml
+++ b/.github/workflows/nightly-fuzz.yml
@@ -35,7 +35,7 @@ jobs:
         with:
           go-version-file: go.mod
       - name: restore the working corpus
-        uses: actions/cache/restore@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
+        uses: actions/cache/restore@2c8a9bd7457de244a408f35966fab2fb45fda9c8 # v6.0.0
         with:
           path: ~/.cache/go-build/fuzz
           key: fuzz-corpus-${{ github.run_id }}
@@ -74,7 +74,7 @@ jobs:
           fi
       - name: save the working corpus
         if: always()
-        uses: actions/cache/save@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
+        uses: actions/cache/save@2c8a9bd7457de244a408f35966fab2fb45fda9c8 # v6.0.0
         with:
           path: ~/.cache/go-build/fuzz
           key: fuzz-corpus-${{ github.run_id }}