diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 01e3978..b01725b 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -47,7 +47,7 @@ jobs:
       # the same thing). Commit Package.resolved and add it back here the day a
       # third-party dependency lands.
       - name: Cache SwiftPM
-        uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: |
             .build
@@ -82,7 +82,7 @@ jobs:
         run: xcodegen generate
 
       - name: Cache SwiftPM
-        uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: ~/Library/Caches/org.swift.swiftpm
           key: ${{ runner.os }}-xcode-spm-${{ hashFiles('Package.swift') }}
@@ -141,7 +141,7 @@ jobs:
       # SourcePackages under DerivedData/<Project>-<hash>/), so it restored
       # nothing while costing save/restore time.
       - name: Cache SwiftPM
-        uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: ~/Library/Caches/org.swift.swiftpm
           key: ${{ runner.os }}-xcode-spm-${{ hashFiles('Package.swift') }}