diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index aa5cb802fa..79ae58211a 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -54,7 +54,7 @@ jobs:
         with:
           python-version: "3.14.6"
       - name: Restore venv
-        uses: actions/cache/restore@2c8a9bd7457de244a408f35966fab2fb45fda9c8 # v6.0.0
+        uses: actions/cache/restore@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: .venv
           key: venv-${{ github.sha }}
@@ -158,7 +158,7 @@ jobs:
         with:
           python-version: "3.14.6"
       - name: Restore venv
-        uses: actions/cache/restore@2c8a9bd7457de244a408f35966fab2fb45fda9c8 # v6.0.0
+        uses: actions/cache/restore@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: .venv
           key: venv-${{ github.sha }}
@@ -222,7 +222,7 @@ jobs:
       - name: Compile
         run: cd nidx && cargo build --release
       - name: Upload binaries to cache
-        uses: actions/cache/save@2c8a9bd7457de244a408f35966fab2fb45fda9c8 # v6.0.0
+        uses: actions/cache/save@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: "nidx/target/release/nidx"
           key: nidx-bin-${{ github.sha }}
@@ -258,7 +258,7 @@ jobs:
           timeout_minutes: 20
           command: uv sync --no-editable
       - name: Upload virtualenv to cache
-        uses: actions/cache/save@2c8a9bd7457de244a408f35966fab2fb45fda9c8 # v6.0.0
+        uses: actions/cache/save@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: .venv
           key: venv-${{ github.sha }}
@@ -277,13 +277,13 @@ jobs:
         with:
           python-version: "3.14.6"
       - name: Restore venv
-        uses: actions/cache/restore@2c8a9bd7457de244a408f35966fab2fb45fda9c8 # v6.0.0
+        uses: actions/cache/restore@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: .venv
           key: venv-${{ github.sha }}
           fail-on-cache-miss: true
       - name: Restore nidx binary
-        uses: actions/cache/restore@2c8a9bd7457de244a408f35966fab2fb45fda9c8 # v6.0.0
+        uses: actions/cache/restore@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: "nidx/target/release/nidx"
           key: nidx-bin-${{ github.sha }}
@@ -336,7 +336,7 @@ jobs:
           python-version: "3.14.6"
 
       - name: Restore venv
-        uses: actions/cache/restore@2c8a9bd7457de244a408f35966fab2fb45fda9c8 # v6.0.0
+        uses: actions/cache/restore@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: .venv
           key: venv-${{ github.sha }}
@@ -383,7 +383,7 @@ jobs:
           python-version: "3.14.6"
 
       - name: Restore venv
-        uses: actions/cache/restore@2c8a9bd7457de244a408f35966fab2fb45fda9c8 # v6.0.0
+        uses: actions/cache/restore@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: .venv
           key: venv-${{ github.sha }}
@@ -425,7 +425,7 @@ jobs:
           python-version: "3.14.6"
 
       - name: Restore venv
-        uses: actions/cache/restore@2c8a9bd7457de244a408f35966fab2fb45fda9c8 # v6.0.0
+        uses: actions/cache/restore@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: .venv
           key: venv-${{ github.sha }}