diff --git a/.github/workflows/check.yml b/.github/workflows/check.yml
index c9e0548..0b23813 100644
--- a/.github/workflows/check.yml
+++ b/.github/workflows/check.yml
@@ -148,7 +148,7 @@ jobs:
         with:
           toolchain: stable
       - name: cargo install cargo-hack
-        uses: taiki-e/install-action@86f7a0ffb25f40114606501a311ebcfaf882ea32 # tag=v2.88.0
+        uses: taiki-e/install-action@c509219cf42fba86913069efd0ade2458c59337b # tag=v2.90.1
         with:
           tool: cargo-hack
       # intentionally no target specifier; see https://github.com/jonhoo/rust-ci-conf/pull/4
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 1b6e58d..dd8b40a 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -170,7 +170,7 @@ jobs:
           toolchain: stable
           components: llvm-tools-preview
       - name: cargo install cargo-llvm-cov
-        uses: taiki-e/install-action@86f7a0ffb25f40114606501a311ebcfaf882ea32 # tag=v2.88.0
+        uses: taiki-e/install-action@c509219cf42fba86913069efd0ade2458c59337b # tag=v2.90.1
         with:
           tool: cargo-llvm-cov
       - name: cargo generate-lockfile