diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index f64bfa10..cb4da1a8 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -374,7 +374,7 @@ jobs:
       # — a runner-built glibc binary is not guaranteed to run in the container.
       - name: Cache the pinned nono build (container distro)
         id: nono-cache
-        uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: ~/.local/nono-pin-bookworm
           key: nono-bookworm-${{ steps.pin.outputs.commit }}
@@ -452,7 +452,7 @@ jobs:
           echo "commit=$commit" >> "$GITHUB_OUTPUT"
       - name: Cache the pinned nono build
         id: nono-cache-attested
-        uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: ~/.local/nono-pin
           key: nono-Linux-${{ steps.pin-attested.outputs.commit }}
@@ -559,7 +559,7 @@ jobs:
         run: sudo apt-get update && sudo apt-get install -y libdbus-1-dev pkg-config
       - name: Cache the pinned nono build
         id: nono-cache
-        uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: ~/.local/nono-pin
           key: nono-${{ matrix.os }}-${{ steps.pin.outputs.commit }}