diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index e911d068..1b2d4c2f 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -22,7 +22,7 @@ jobs:
         name: flake-programs-sqlite
         authToken: '${{ secrets.CACHIX_AUTH_TOKEN }}'
     - name: Cache build result on GitHub
-      uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
+      uses: actions/cache@2c8a9bd7457de244a408f35966fab2fb45fda9c8 # v6.0.0
       with:
         path: updater.bundle
         key: ${{ runner.os }}-bundle-${{ hashFiles('**/flake.lock') }}-${{ hashFiles('**/*.nix') }}-${{ hashFiles('**/*.nim*') }}
diff --git a/.github/workflows/scrape.yml b/.github/workflows/scrape.yml
index 0d07a532..025d1a98 100644
--- a/.github/workflows/scrape.yml
+++ b/.github/workflows/scrape.yml
@@ -31,7 +31,7 @@ jobs:
           git -C main config user.email github-actions@github.com
 
       - name: fetch from cache
-        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
+        uses: actions/cache@2c8a9bd7457de244a408f35966fab2fb45fda9c8 # v6.0.0
         with:
           path: updater.bundle
           key: ${{ runner.os }}-bundle-${{ hashFiles('main/**/flake.lock') }}-${{ hashFiles('main/**/*.nix') }}-${{ hashFiles('main/**/*.nim*') }}