diff --git a/.github/workflows/_request.yml b/.github/workflows/_request.yml
index 2cad7228cb589..1b4f6c8177417 100644
--- a/.github/workflows/_request.yml
+++ b/.github/workflows/_request.yml
@@ -164,14 +164,14 @@ jobs:
     # TODO(phlax): shift this to ci/request action above
     - name: Check Docker cache (x64)
       id: cache-exists-docker-x64
-      uses: actions/cache/restore@0057852bfaa89a56745cba8c7296529d2fc39830  # v4.3.0
+      uses: actions/cache/restore@9255dc7a253b0ccc959486e2bca901246202afeb  # v5.0.1
       with:
         lookup-only: true
         path: /tmp/cache
         key: ${{ fromJSON(steps.data.outputs.value).request.build-image.default }}
     - name: Check Docker cache (arm64)
       id: cache-exists-docker-arm64
-      uses: actions/cache/restore@0057852bfaa89a56745cba8c7296529d2fc39830  # v4.3.0
+      uses: actions/cache/restore@9255dc7a253b0ccc959486e2bca901246202afeb  # v5.0.1
       with:
         lookup-only: true
         path: /tmp/cache
diff --git a/.github/workflows/_run.yml b/.github/workflows/_run.yml
index 748f6a62f8d9e..e7253b851723f 100644
--- a/.github/workflows/_run.yml
+++ b/.github/workflows/_run.yml
@@ -298,7 +298,7 @@ jobs:
     # HACK/WORKAROUND for cache scope issue (https://github.com/envoyproxy/envoy/issues/37603)
     - if: ${{ inputs.cache-build-image }}
       id: cache-lookup
-      uses: actions/cache/restore@0057852bfaa89a56745cba8c7296529d2fc39830  # v4.3.0
+      uses: actions/cache/restore@9255dc7a253b0ccc959486e2bca901246202afeb  # v5.0.1
       with:
         lookup-only: true
         path: /tmp/cache