diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 1af09c4..6210e2e 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -51,7 +51,7 @@ jobs:
       # The pinned toolchain is a 50-100 MiB download. Keyed on the script
       # that pins it, so a version bump misses the cache instead of quietly
       # building against the previous release.
-      - uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
+      - uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: .zig
           key: zig-${{ runner.os }}-${{ runner.arch }}-${{ hashFiles('scripts/toolchain.ts') }}
@@ -172,7 +172,7 @@ jobs:
         with:
           bun-version: ${{ env.BUN_VERSION }}
 
-      - uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
+      - uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: .zig
           key: zig-${{ runner.os }}-${{ runner.arch }}-${{ hashFiles('scripts/toolchain.ts') }}