diff --git a/.github/actions/mise-tools/action.yml b/.github/actions/mise-tools/action.yml
index b111b72327..ab37de3903 100644
--- a/.github/actions/mise-tools/action.yml
+++ b/.github/actions/mise-tools/action.yml
@@ -4,7 +4,7 @@ description: "Cache and install mise tools with rate limit handling"
 runs:
   using: "composite"
   steps:
-    - uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
+    - uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5
       with:
         key: ${{ runner.os }}-${{ runner.arch }}-mise-tools-${{ hashFiles('mise.lock') }}
         restore-keys: ${{ runner.os }}-${{ runner.arch }}-mise-tools-
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index f79e1ff8ec..bfd974b834 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -56,7 +56,7 @@ jobs:
           tool: cross
       - name: cache crates
         id: cache-crates
-        uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
+        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5
         with:
           path: ~/.cargo/registry/cache
           key: cargo-registry-${{ hashFiles('**/Cargo.lock') }}
@@ -103,7 +103,7 @@ jobs:
       - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
       - name: cache crates
         id: cache-crates
-        uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
+        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5
         with:
           path: ~/.cargo/registry/cache
           key: cargo-registry-${{ hashFiles('**/Cargo.lock') }}
@@ -321,7 +321,7 @@ jobs:
           git_commit_gpgsign: true
       - name: cache zipsign
         id: cache-zipsign
-        uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
+        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5
         with:
           path: ~/.cargo/bin/zipsign
           key: cargo-zipsign
diff --git a/.github/workflows/test-vfox.yml b/.github/workflows/test-vfox.yml
index bfe1f7ee6c..8061ec8695 100644
--- a/.github/workflows/test-vfox.yml
+++ b/.github/workflows/test-vfox.yml
@@ -32,7 +32,7 @@ jobs:
           echo "$PWD/target/debug" >> "$GITHUB_PATH"
       - run: mise -v
       - run: mise --cd crates/vfox install
-      - uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
+      - uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5
         with:
           key: ${{ runner.os }}-${{ runner.arch }}-mise-tools-vfox-${{ hashFiles('crates/vfox/mise.toml') }}
           restore-keys: ${{ runner.os }}-${{ runner.arch }}-mise-tools-vfox-