diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index fd37c7b..7fa045e 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -112,7 +112,7 @@ jobs:
           node-version: 24
 
       - name: Cache Node.js dependencies
-        uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
+        uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
         with:
           path: |
             ~/.npm
@@ -157,7 +157,7 @@ jobs:
           registry-url: "https://registry.npmjs.org"
 
       - name: Cache Node.js dependencies
-        uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
+        uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
         with:
           path: |
             ~/.npm
@@ -175,7 +175,7 @@ jobs:
         run: npm ci || { echo "❌ npm install failed"; npm install; }
 
       - name: Cache Generated Grammar
-        uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
+        uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
         id: cache-grammar
         with:
           path: |
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 133a0b0..948c0f5 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -42,7 +42,7 @@ jobs:
           node-version: ${{ matrix.node-version }}
 
       - name: Cache Node.js dependencies
-        uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
+        uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
         id: cache-npm
         with:
           path: |
@@ -62,7 +62,7 @@ jobs:
         shell: bash
 
       - name: Cache npx store
-        uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
+        uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
         id: cache-npx
         with:
           path: |
@@ -72,7 +72,7 @@ jobs:
           key: ${{ runner.os }}-npx-${{ hashFiles('package.json') }}
 
       - name: Cache Generated Grammar
-        uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
+        uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
         id: cache-grammar
         with:
           path: |
@@ -87,7 +87,7 @@ jobs:
         shell: bash
 
       - name: Cache Built Parser
-        uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
+        uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
         id: cache-parser
         with:
           path: |
@@ -170,7 +170,7 @@ jobs:
           node-version: 24
 
       - name: Cache Node.js dependencies
-        uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
+        uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
         with:
           path: |
             ~/.npm
@@ -212,7 +212,7 @@ jobs:
           node-version: 24
 
       - name: Cache Node.js dependencies
-        uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
+        uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
         with:
           path: |
             ~/.npm