diff --git a/.github/workflows/android-kotlin.yml b/.github/workflows/android-kotlin.yml
index d3b9ccc2..b5e0724b 100644
--- a/.github/workflows/android-kotlin.yml
+++ b/.github/workflows/android-kotlin.yml
@@ -53,7 +53,7 @@ jobs:
         uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8  # stable (2026-04-04)
 
       - name: Cache Cargo registry
-        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae  # v5.0.5
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9  # v6.1.0
         with:
           path: |
             ~/.cargo/registry/index
@@ -75,7 +75,7 @@ jobs:
         run: yes | $ANDROID_SDK_ROOT/cmdline-tools/latest/bin/sdkmanager --licenses 2>/dev/null || true
 
       - name: Cache Gradle packages
-        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae  # v5.0.5
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9  # v6.1.0
         with:
           path: |
             ~/.gradle/caches
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index a236badf..aaee13f3 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -134,7 +134,7 @@ jobs:
       # ── whisper-cli sidecar ─────────────────────────────────────────────────
       - name: Cache whisper-cli binary
         id: whisper_cache
-        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae  # v5.0.5
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9  # v6.1.0
         with:
           path: src-tauri/binaries/${{ matrix.whisper_binary }}
           key: whisper-${{ matrix.whisper_binary }}-v1.7.4-baseline-isa
@@ -292,7 +292,7 @@ jobs:
             > src-tauri/gen/android/app/tauri.properties
 
       - name: Cache Gradle packages
-        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae  # v5.0.5
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9  # v6.1.0
         with:
           path: |
             ~/.gradle/caches