diff --git a/.github/workflows/deny.yml b/.github/workflows/deny.yml
index 014d771e..5e045d6a 100644
--- a/.github/workflows/deny.yml
+++ b/.github/workflows/deny.yml
@@ -24,7 +24,7 @@ jobs:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       # A release binary of cargo-deny, checked against its checksum.
-      - uses: taiki-e/install-action@682ce6c3c696a4cd5168a05f98e51aa02b877941 # v2.89.1
+      - uses: taiki-e/install-action@b80e2bb2635f28eb98b9fce1e2f0887e1535c6b2 # v2.90.0
         with:
           tool: cargo-deny@0.20.2
 
diff --git a/.github/workflows/fuzz.yml b/.github/workflows/fuzz.yml
index 9a819cd2..cc849f27 100644
--- a/.github/workflows/fuzz.yml
+++ b/.github/workflows/fuzz.yml
@@ -29,7 +29,7 @@ jobs:
 
       # A release binary of cargo-fuzz, checked against its checksum;
       # scripts/fuzz.sh keeps it when the version is its own.
-      - uses: taiki-e/install-action@682ce6c3c696a4cd5168a05f98e51aa02b877941 # v2.89.1
+      - uses: taiki-e/install-action@b80e2bb2635f28eb98b9fce1e2f0887e1535c6b2 # v2.90.0
         with:
           tool: cargo-fuzz@0.13.2
 
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 2100ef61..5c7711f9 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -438,7 +438,7 @@ jobs:
           fetch-depth: 0
       # Release binaries of both tools, each checked against its checksum:
       # no crate is built for the notes.
-      - uses: taiki-e/install-action@682ce6c3c696a4cd5168a05f98e51aa02b877941 # v2.89.1
+      - uses: taiki-e/install-action@b80e2bb2635f28eb98b9fce1e2f0887e1535c6b2 # v2.90.0
         with:
           tool: cargo-about@0.9.2,git-cliff@2.9.1
       # The licenses of the crates in the binaries, with their texts: the