diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index ea550eb..a33cdc0 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -72,14 +72,14 @@ jobs:
       # hash and skip the 1-2 min Go→wasip1 build entirely on cache hit.
       - name: Restore helm engine wasm cache
         id: cache-helm-engine
-        uses: actions/cache@v5
+        uses: actions/cache@v6
         with:
           path: crates/helm-engine-wasm/assets/helm-engine.wasm
           key: helm-engine-${{ runner.os }}-${{ hashFiles('.mise.toml', 'crates/helm-engine-wasm/go-src/**', 'crates/helm-engine-wasm/fork/**') }}
 
       - name: Restore kustomize engine wasm cache
         id: cache-kustomize-engine
-        uses: actions/cache@v5
+        uses: actions/cache@v6
         with:
           path: crates/kustomize-engine-wasm/assets/kustomize-engine.wasm
           key: kustomize-engine-${{ runner.os }}-${{ hashFiles('.mise.toml', 'crates/kustomize-engine-wasm/go-src/**') }}
@@ -88,7 +88,7 @@ jobs:
       # the helm/kustomize go-src/go.mod files so a dep bump invalidates
       # cleanly.
       - name: Cache Go module + build cache
-        uses: actions/cache@v5
+        uses: actions/cache@v6
         with:
           path: |
             ~/go/pkg/mod
@@ -100,7 +100,7 @@ jobs:
       # Cache the helm fork tree (cloned by fork/apply.sh). Keyed on the
       # patch + apply script hashes so any patch change forces re-clone.
       - name: Cache helm fork tree
-        uses: actions/cache@v5
+        uses: actions/cache@v6
         with:
           path: crates/helm-engine-wasm/third_party/helm-fork
           key: helm-fork-${{ runner.os }}-${{ hashFiles('crates/helm-engine-wasm/fork/**') }}
@@ -139,19 +139,19 @@ jobs:
           cache-workspace-crates: true
 
       - name: Restore helm engine wasm cache
-        uses: actions/cache@v5
+        uses: actions/cache@v6
         with:
           path: crates/helm-engine-wasm/assets/helm-engine.wasm
           key: helm-engine-${{ runner.os }}-${{ hashFiles('.mise.toml', 'crates/helm-engine-wasm/go-src/**', 'crates/helm-engine-wasm/fork/**') }}
 
       - name: Restore kustomize engine wasm cache
-        uses: actions/cache@v5
+        uses: actions/cache@v6
         with:
           path: crates/kustomize-engine-wasm/assets/kustomize-engine.wasm
           key: kustomize-engine-${{ runner.os }}-${{ hashFiles('.mise.toml', 'crates/kustomize-engine-wasm/go-src/**') }}
 
       - name: Cache Go module + build cache
-        uses: actions/cache@v5
+        uses: actions/cache@v6
         with:
           path: |
             ~/go/pkg/mod
@@ -161,7 +161,7 @@ jobs:
             go-${{ runner.os }}-
 
       - name: Cache helm fork tree
-        uses: actions/cache@v5
+        uses: actions/cache@v6
         with:
           path: crates/helm-engine-wasm/third_party/helm-fork
           key: helm-fork-${{ runner.os }}-${{ hashFiles('crates/helm-engine-wasm/fork/**') }}
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index c767de3..f314175 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -205,19 +205,19 @@ jobs:
       # keys mean this job inherits hits from main-branch CI runs and
       # skips redundant Go compiles.
       - name: Restore helm engine wasm cache
-        uses: actions/cache@v5
+        uses: actions/cache@v6
         with:
           path: crates/helm-engine-wasm/assets/helm-engine.wasm
           key: helm-engine-${{ runner.os }}-${{ hashFiles('.mise.toml', 'crates/helm-engine-wasm/go-src/**', 'crates/helm-engine-wasm/fork/**') }}
 
       - name: Restore kustomize engine wasm cache
-        uses: actions/cache@v5
+        uses: actions/cache@v6
         with:
           path: crates/kustomize-engine-wasm/assets/kustomize-engine.wasm
           key: kustomize-engine-${{ runner.os }}-${{ hashFiles('.mise.toml', 'crates/kustomize-engine-wasm/go-src/**') }}
 
       - name: Cache Go module + build cache
-        uses: actions/cache@v5
+        uses: actions/cache@v6
         with:
           path: |
             ~/go/pkg/mod
@@ -227,7 +227,7 @@ jobs:
             go-${{ runner.os }}-
 
       - name: Cache helm fork tree
-        uses: actions/cache@v5
+        uses: actions/cache@v6
         with:
           path: crates/helm-engine-wasm/third_party/helm-fork
           key: helm-fork-${{ runner.os }}-${{ hashFiles('crates/helm-engine-wasm/fork/**') }}