diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 1681ad4..3db65eb 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -34,7 +34,7 @@ jobs:
       - name: Inspect Cargo package without publishing
         run: cargo package --locked --list -p cryptoshift
       - name: Cache Cargo
-        uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2.9.2
+        uses: Swatinem/rust-cache@d1527c8f67ef9af357290475d4af4b0fab8f12e0 # v2.9.3
         with:
           save-if: ${{ github.event_name == 'push' && github.ref == 'refs/heads/main' }}
       - name: Format
@@ -145,7 +145,7 @@ jobs:
         with:
           toolchain: stable
       - name: Cache pinned audit tool binaries from trusted main
-        uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2.9.2
+        uses: Swatinem/rust-cache@d1527c8f67ef9af357290475d4af4b0fab8f12e0 # v2.9.3
         with:
           prefix-key: cryptoshift-supply-chain-v1
           key: audit-0.22.2-deny-0.20.2-semver-0.51.0