diff --git a/.github/workflows/fuzz.yml b/.github/workflows/fuzz.yml
index 81da06f..b3609ad 100644
--- a/.github/workflows/fuzz.yml
+++ b/.github/workflows/fuzz.yml
@@ -40,7 +40,7 @@ jobs:
       #
       # A unique key per run so each one saves, with a prefix restore so it picks up the
       # newest. GitHub evicts by age and size on its own; these corpora are a few MB.
-      - uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
+      - uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: fuzz/corpus/${{ matrix.target }}
           key: fuzz-corpus-${{ matrix.target }}-${{ github.run_id }}