diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index f3d55b5..eff37ae 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -58,7 +58,7 @@ jobs:
           python-version: '3.x'
 
       - name: Cache NuGet packages
-        uses: actions/cache@v5
+        uses: actions/cache@v6
         with:
           path: ~/.nuget/packages
           key: nuget-lint-${{ runner.os }}-${{ hashFiles('modules/facetracking/src/host/**/*.csproj', 'tests/e2e/facetracking_test_module/**/*.csproj', 'modules/facetracking/src/host/**/packages.lock.json') }}
@@ -66,7 +66,7 @@ jobs:
             nuget-lint-${{ runner.os }}-
 
       - name: Cache LLVM
-        uses: actions/cache@v5
+        uses: actions/cache@v6
         with:
           path: 'C:\Program Files\LLVM'
           key: llvm-${{ runner.os }}-22.1.0-v2
@@ -152,7 +152,7 @@ jobs:
         # cold MSVC pass when a change touches only a few files. Keep save as a
         # separate best-effort step so cache archive failures cannot fail CI
         # after build/tests already passed.
-        uses: actions/cache/restore@v5
+        uses: actions/cache/restore@v6
         with:
           path: build
           key: build-vs2026-${{ runner.os }}-${{ hashFiles('**/CMakeLists.txt', 'core/src/**/*.cpp', 'core/src/**/*.h', 'modules/**/*.cpp', 'modules/**/*.h', 'modules/**/*.cs', '.gitmodules', 'version.txt') }}
@@ -160,7 +160,7 @@ jobs:
             build-vs2026-${{ runner.os }}-
 
       - name: Cache NuGet packages
-        uses: actions/cache@v5
+        uses: actions/cache@v6
         with:
           path: ~/.nuget/packages
           key: nuget-${{ runner.os }}-${{ hashFiles('modules/facetracking/src/host/**/*.csproj', 'modules/facetracking/src/host/**/packages.lock.json') }}
@@ -229,7 +229,7 @@ jobs:
       - name: Save build directory cache
         if: success() && steps.build-cache.outputs.cache-hit != 'true'
         continue-on-error: true
-        uses: actions/cache/save@v5
+        uses: actions/cache/save@v6
         with:
           path: build
           key: ${{ steps.build-cache.outputs.cache-primary-key }}
diff --git a/.github/workflows/nightly-tidy.yml b/.github/workflows/nightly-tidy.yml
index b510400..b9909e1 100644
--- a/.github/workflows/nightly-tidy.yml
+++ b/.github/workflows/nightly-tidy.yml
@@ -39,7 +39,7 @@ jobs:
           python-version: '3.x'
 
       - name: Cache NuGet packages
-        uses: actions/cache@v5
+        uses: actions/cache@v6
         with:
           path: ~/.nuget/packages
           key: nuget-lint-${{ runner.os }}-${{ hashFiles('modules/facetracking/src/host/**/*.csproj', 'tests/e2e/facetracking_test_module/**/*.csproj', 'modules/facetracking/src/host/**/packages.lock.json') }}
@@ -47,7 +47,7 @@ jobs:
             nuget-lint-${{ runner.os }}-
 
       - name: Cache LLVM
-        uses: actions/cache@v5
+        uses: actions/cache@v6
         with:
           path: 'C:\Program Files\LLVM'
           key: llvm-${{ runner.os }}-22.1.0-v2
@@ -55,7 +55,7 @@ jobs:
       - name: Cache clang-tidy build
         # lint.ps1 configures a Ninja compile database under build/lint-tidy.
         # Caching it keeps the configure + analysis incremental across nights.
-        uses: actions/cache@v5
+        uses: actions/cache@v6
         with:
           path: build/lint-tidy
           key: tidy-build-vs2026-${{ runner.os }}-${{ hashFiles('**/CMakeLists.txt') }}
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index a117859..e77660d 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -127,7 +127,7 @@ jobs:
         # fallback lets a near-miss (different source hash) reuse the
         # most recent build state -- CMake then recompiles only what
         # changed.
-        uses: actions/cache@v5
+        uses: actions/cache@v6
         with:
           path: build
           key: build-vs2026-${{ runner.os }}-${{ hashFiles('**/CMakeLists.txt', 'core/src/**/*.cpp', 'core/src/**/*.h', 'modules/**/*.cpp', 'modules/**/*.h', 'modules/**/*.cs', '.gitmodules', 'version.txt') }}
@@ -137,7 +137,7 @@ jobs:
       - name: Cache NuGet packages
         # FaceModuleHost's dotnet publish restores NuGet packages on every
         # cold run. Caching the user-level NuGet folder keeps them warm.
-        uses: actions/cache@v5
+        uses: actions/cache@v6
         with:
           path: ~/.nuget/packages
           key: nuget-${{ runner.os }}-${{ hashFiles('modules/facetracking/src/host/**/*.csproj', 'modules/facetracking/src/host/**/packages.lock.json') }}
@@ -147,7 +147,7 @@ jobs:
       - name: Cache NSIS install
         # Skips the ~30 s choco install on warm runs. Key bumped on NSIS
         # upgrades.
-        uses: actions/cache@v5
+        uses: actions/cache@v6
         with:
           path: 'C:\Program Files (x86)\NSIS'
           key: nsis-${{ runner.os }}-3.12
@@ -267,7 +267,7 @@ jobs:
           $driverSrc = "build/driver_wkopenvr"
 
           # --- Pre-stage cleanup ------------------------------------------
-          # actions/cache@v5 restores build/ from prior runs. A previous dev
+          # actions/cache@v6 restores build/ from prior runs. A previous dev
           # build (with no disabled-in-release.flag in place) can leave
           # build/driver_wkopenvr/resources/<gated-slug>/host populated with
           # host exes that the current release build wouldn't produce. Wipe