diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index c9008e9..5a331c5 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -103,7 +103,7 @@ jobs:
       # the cache key reads the same variable, so they can never drift apart.
       - name: Cache the opencode v2 engine
         if: matrix.node-version == 24
-        uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: /tmp/dm-e2e-v2-*
           key: opencode-v2-engine-${{ runner.os }}-${{ env.E2E_V2_VERSION }}
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 5331024..c66abcf 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -51,7 +51,7 @@ jobs:
           fi
 
       - name: Cache the opencode v2 engine
-        uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: /tmp/dm-e2e-v2-*
           key: opencode-v2-engine-${{ runner.os }}-${{ env.E2E_V2_VERSION }}