diff --git a/.github/workflows/fuzz.yml b/.github/workflows/fuzz.yml
index f657ec0..adb2dad 100644
--- a/.github/workflows/fuzz.yml
+++ b/.github/workflows/fuzz.yml
@@ -44,7 +44,7 @@ jobs:
       # Resume from the accumulated corpus. restore-keys makes each run pick
       # up the most recent cache even though the key is run-unique, so the
       # corpus grows monotonically instead of resetting nightly.
-      - uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
+      - uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: fuzz/corpus/${{ matrix.target }}
           key: fuzz-corpus-${{ matrix.target }}-${{ github.run_id }}
@@ -87,7 +87,7 @@ jobs:
       - uses: taiki-e/install-action@37f7c5781271959fb65b6b35224e28652ff2b63d # v2
         with:
           tool: cargo-fuzz
-      - uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
+      - uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: fuzz/corpus/${{ matrix.target }}
           key: fuzz-corpus-arm-${{ matrix.target }}-${{ github.run_id }}