diff --git a/.github/workflows/_request.yml b/.github/workflows/_request.yml
index 52790930d524a..cdc4e08408d10 100644
--- a/.github/workflows/_request.yml
+++ b/.github/workflows/_request.yml
@@ -176,14 +176,14 @@ jobs:
     # TODO(phlax): shift this to ci/request action above
     - name: Check Docker cache (x64)
       id: cache-exists-docker-x64
-      uses: actions/cache/restore@27d5ce7f107fe9357f9df03efb73ab90386fccae  # v5.0.5
+      uses: actions/cache/restore@2c8a9bd7457de244a408f35966fab2fb45fda9c8  # v6.0.0
       with:
         lookup-only: true
         path: /tmp/cache
         key: ${{ fromJSON(steps.data.outputs.value).request.build-image.default }}
     - name: Check Docker cache (arm64)
       id: cache-exists-docker-arm64
-      uses: actions/cache/restore@27d5ce7f107fe9357f9df03efb73ab90386fccae  # v5.0.5
+      uses: actions/cache/restore@2c8a9bd7457de244a408f35966fab2fb45fda9c8  # v6.0.0
       with:
         lookup-only: true
         path: /tmp/cache
diff --git a/.github/workflows/_run.yml b/.github/workflows/_run.yml
index 8e39198cddc6f..04af39c9e704c 100644
--- a/.github/workflows/_run.yml
+++ b/.github/workflows/_run.yml
@@ -321,7 +321,7 @@ jobs:
     # HACK/WORKAROUND for cache scope issue (https://github.com/envoyproxy/envoy/issues/37603)
     - if: ${{ inputs.cache-build-image }}
       id: cache-lookup
-      uses: actions/cache/restore@27d5ce7f107fe9357f9df03efb73ab90386fccae  # v5.0.5
+      uses: actions/cache/restore@2c8a9bd7457de244a408f35966fab2fb45fda9c8  # v6.0.0
       with:
         lookup-only: true
         path: /tmp/cache