diff --git a/.github/workflows/maven-dependency-check.yml b/.github/workflows/maven-dependency-check.yml
index fb02fda..a2c9a0c 100644
--- a/.github/workflows/maven-dependency-check.yml
+++ b/.github/workflows/maven-dependency-check.yml
@@ -44,7 +44,7 @@ jobs:
         # The build redirects the local repo to .m2/repository (see
         # -Dmaven.repo.local in MAVEN_OPTS), so cache it at the location the
         # build actually uses rather than setup-java's default ~/.m2/repository.
-        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: .m2/repository
           key: ${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }}
@@ -57,7 +57,7 @@ jobs:
         # rate-limit-prone full NVD download into a quick delta update. The
         # unique per-run key always saves the freshly-updated DB; restore-keys
         # restores the most recent previous copy as the starting point.
-        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: .m2/repository/org/owasp/dependency-check-data
           key: dependency-check-data-${{ github.run_id }}