diff --git a/.github/workflows/lint-shared-workflows.yaml b/.github/workflows/lint-shared-workflows.yaml
index b92397b5a..074552cc5 100644
--- a/.github/workflows/lint-shared-workflows.yaml
+++ b/.github/workflows/lint-shared-workflows.yaml
@@ -51,7 +51,7 @@ jobs:
       - name: Restore github-action.json schema
         id: restore-schema
         if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository
-        uses: actions/cache/restore@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
+        uses: actions/cache/restore@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4
         with:
           path: |
             github-action.json
@@ -98,7 +98,7 @@ jobs:
           GH_TOKEN: ${{ github.token }}
 
       - name: Save github-action.json schema to cache
-        uses: actions/cache/save@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
+        uses: actions/cache/save@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4
         if: steps.restore-schema.conclusion == 'success' && steps.download-schema.outputs.schema-changed == 'true'
         with:
           path: |
diff --git a/.github/workflows/reusable-zizmor.yml b/.github/workflows/reusable-zizmor.yml
index 8c49966ca..2eb36b2a9 100644
--- a/.github/workflows/reusable-zizmor.yml
+++ b/.github/workflows/reusable-zizmor.yml
@@ -261,7 +261,7 @@ jobs:
 
       - name: Restore config from cache
         id: cache-config
-        uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
+        uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4
         if: env.DEFAULT_ZIZMOR_CONFIG_DOWNLOADED
         with:
           path: ${{ runner.temp }}/zizmor.yml
diff --git a/actions/generate-openapi-clients/action.yaml b/actions/generate-openapi-clients/action.yaml
index 3ab17b26a..3f44fa90e 100644
--- a/actions/generate-openapi-clients/action.yaml
+++ b/actions/generate-openapi-clients/action.yaml
@@ -38,7 +38,7 @@ runs:
   steps:
     # Get openapi-generator
     - id: openapi-generator-cache
-      uses: actions/cache/restore@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
+      uses: actions/cache/restore@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4
       with:
         key: openapi-generator-${{ inputs.generator-version }}
         path: openapi-generator-cli.jar
@@ -50,7 +50,7 @@ runs:
         GENERATOR_VERSION: ${{ inputs.generator-version }}
       run: |
         wget -nv "https://repo1.maven.org/maven2/org/openapitools/openapi-generator-cli/${GENERATOR_VERSION}/openapi-generator-cli-${GENERATOR_VERSION}.jar" -O ./openapi-generator-cli.jar
-    - uses: actions/cache/save@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
+    - uses: actions/cache/save@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4
       if: steps.openapi-generator-cache.outputs.cache-hit != 'true'
       with:
         key: openapi-generator-${{ inputs.generator-version }}
diff --git a/actions/setup-argo/action.yaml b/actions/setup-argo/action.yaml
index 98ae8b5b1..cab6198d9 100644
--- a/actions/setup-argo/action.yaml
+++ b/actions/setup-argo/action.yaml
@@ -22,7 +22,7 @@ runs:
   steps:
     - name: Setup cache
       id: cache
-      uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
+      uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4
       with:
         path: /usr/local/bin/argo
         key: ${{ inputs.cache-prefix }}-${{ runner.os }}-${{ runner.arch }}-${{ inputs.version }}
diff --git a/actions/setup-conftest/action.yaml b/actions/setup-conftest/action.yaml
index 3770c8982..150745eba 100644
--- a/actions/setup-conftest/action.yaml
+++ b/actions/setup-conftest/action.yaml
@@ -13,7 +13,7 @@ runs:
   steps:
     - name: Setup cache
       id: cache
-      uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
+      uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4
       with:
         path: /usr/local/bin/conftest
         key: conftest-${{ runner.os }}-${{ runner.arch }}-${{ inputs.version }}
diff --git a/actions/setup-jrsonnet/action.yaml b/actions/setup-jrsonnet/action.yaml
index 4be5eca2a..95ad11efe 100644
--- a/actions/setup-jrsonnet/action.yaml
+++ b/actions/setup-jrsonnet/action.yaml
@@ -22,7 +22,7 @@ runs:
   steps:
     - name: Setup cache
       id: cache
-      uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
+      uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4
       with:
         path: /usr/local/bin/jrsonnet
         key: ${{ inputs.cache-prefix }}-${{ runner.os }}-${{ runner.arch }}-${{ inputs.version }}