diff --git a/.github/actions/build-cache/action.yml b/.github/actions/build-cache/action.yml
index b8638f67e9..1252a6a97a 100644
--- a/.github/actions/build-cache/action.yml
+++ b/.github/actions/build-cache/action.yml
@@ -25,7 +25,7 @@ runs:
         hash="$(find ./${{ inputs.working-directory }}/bin ! -type d | sort | xargs openssl sha256 | openssl sha256 -r | cut -d' ' -f1)"
         echo "hash=$hash" >> "$GITHUB_OUTPUT"
     - name: Restore Hermit Cache
-      uses: actions/cache/restore@5a3ec84eff668545956fd18022155c47e93e2684 # v4
+      uses: actions/cache/restore@0400d5f644dc74513175e3cd8d07132dd4860809 # v4
       with:
         path: ${{ runner.os == 'macOS' && '~/Library/Caches/hermit/cache' || '~/.cache/hermit/cache' }}
         key: ${{ runner.os }}-${{ runner.arch }}-hermit-cache-${{ steps.bin-hash.outputs.hash }}
@@ -34,7 +34,7 @@ runs:
           ${{ runner.os }}-${{ runner.arch }}-hermit-cache-
     - name: Restore Go Modules Cache
       id: cache-go-modules
-      uses: actions/cache/restore@5a3ec84eff668545956fd18022155c47e93e2684 # v4
+      uses: actions/cache/restore@0400d5f644dc74513175e3cd8d07132dd4860809 # v4
       with:
         path: |
           ~/go/pkg/mod
@@ -46,7 +46,7 @@ runs:
     - name: Restore Maven Modules Cache
       if: ${{ inputs.enable-maven == 'true' }}
       id: cache-maven
-      uses: actions/cache/restore@5a3ec84eff668545956fd18022155c47e93e2684 # v4
+      uses: actions/cache/restore@0400d5f644dc74513175e3cd8d07132dd4860809 # v4
       with:
         path: |
           ~/.m2/repository
@@ -57,7 +57,7 @@ runs:
     - name: Restore pnpm Cache
       id: cache-pnpm
       if: ${{ inputs.enable-pnpm == 'true' }}
-      uses: actions/cache/restore@5a3ec84eff668545956fd18022155c47e93e2684 # v4
+      uses: actions/cache/restore@0400d5f644dc74513175e3cd8d07132dd4860809 # v4
       with:
         path: |
           ~/.pnpm-store
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 36d792257a..e1be799ad6 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -245,7 +245,7 @@ jobs:
         uses: cashapp/activate-hermit@12a728b03ad41eace0f9abaf98a035e7e8ea2318 # ratchet:cashapp/activate-hermit@v1.1.4
       - name: Restore playwright browser cache
         id: cache-playwright
-        uses: actions/cache/restore@5a3ec84eff668545956fd18022155c47e93e2684 # ratchet:actions/cache/restore@5a3ec84eff668545956fd18022155c47e93e2684 # v4
+        uses: actions/cache/restore@5a3ec84eff668545956fd18022155c47e93e2684 # ratchet:actions/cache/restore@0400d5f644dc74513175e3cd8d07132dd4860809 # v4
         with:
           path: ~/.cache/ms-playwright
           key: ${{ runner.os }}-${{ runner.arch }}-playwright-${{ hashFiles('**/pnpm-lock.yaml') }}
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index ffd4ee9b22..44c44533fc 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -99,7 +99,7 @@ jobs:
       - name: Init Hermit
         uses: cashapp/activate-hermit@12a728b03ad41eace0f9abaf98a035e7e8ea2318 # ratchet:cashapp/activate-hermit@v1.1.4
 
-      - uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # ratchet:actions/cache@v4
+      - uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4
         with:
           path: ~/.m2/repository
           key: ${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }}
diff --git a/.github/workflows/writecache.yml b/.github/workflows/writecache.yml
index 954b52f7cf..3d3c7edb2f 100644
--- a/.github/workflows/writecache.yml
+++ b/.github/workflows/writecache.yml
@@ -36,7 +36,7 @@ jobs:
         run: hermit install
       - name: Save Hermit Cache
         if: ${{ steps.hermit-hash.outputs.exists == 0 }}
-        uses: actions/cache/save@5a3ec84eff668545956fd18022155c47e93e2684 # ratchet:actions/cache/save@5a3ec84eff668545956fd18022155c47e93e2684 # v4
+        uses: actions/cache/save@5a3ec84eff668545956fd18022155c47e93e2684 # ratchet:actions/cache/save@0400d5f644dc74513175e3cd8d07132dd4860809 # v4
         with:
           path: ${{ runner.os == 'macOS' && '~/Library/Caches/hermit/cache' || '~/.cache/hermit/cache' }}
           key: ${{ steps.hermit-hash.outputs.key }}
@@ -69,7 +69,7 @@ jobs:
         run: pnpm install
       - name: Save pnpm Modules Cache
         if: ${{ steps.pnpm-hash.outputs.exists == 0 }}
-        uses: actions/cache/save@5a3ec84eff668545956fd18022155c47e93e2684 # ratchet:actions/cache/save@5a3ec84eff668545956fd18022155c47e93e2684 # v4
+        uses: actions/cache/save@5a3ec84eff668545956fd18022155c47e93e2684 # ratchet:actions/cache/save@0400d5f644dc74513175e3cd8d07132dd4860809 # v4
         with:
           path: |
             ~/.pnpm-store
@@ -104,7 +104,7 @@ jobs:
         run: npx playwright install
       - name: Save Playwright Browser Cache
         if: ${{ steps.playwright-hash.outputs.exists == 0 }}
-        uses: actions/cache/save@5a3ec84eff668545956fd18022155c47e93e2684 # ratchet:actions/cache/save@5a3ec84eff668545956fd18022155c47e93e2684 # v4
+        uses: actions/cache/save@5a3ec84eff668545956fd18022155c47e93e2684 # ratchet:actions/cache/save@0400d5f644dc74513175e3cd8d07132dd4860809 # v4
         with:
           path: ~/.cache/ms-playwright
           key: ${{ steps.playwright-hash.outputs.key }}
@@ -144,7 +144,7 @@ jobs:
         run: echo "cache=$(go env GOCACHE)" >> "$GITHUB_OUTPUT"
       - name: Save Go Cache
         if: ${{ steps.go-hash.outputs.exists == 0 }}
-        uses: actions/cache/save@5a3ec84eff668545956fd18022155c47e93e2684 # ratchet:actions/cache/save@5a3ec84eff668545956fd18022155c47e93e2684 # v4
+        uses: actions/cache/save@5a3ec84eff668545956fd18022155c47e93e2684 # ratchet:actions/cache/save@0400d5f644dc74513175e3cd8d07132dd4860809 # v4
         with:
           path: |
             ~/go/pkg/mod
@@ -178,7 +178,7 @@ jobs:
         run: |
           find ~/.m2/repository -type d -name "*SNAPSHOT" -exec rm -rf {} +
       - name: Save Maven Modules Cache
-        uses: actions/cache/save@5a3ec84eff668545956fd18022155c47e93e2684 # ratchet:actions/cache/save@5a3ec84eff668545956fd18022155c47e93e2684 # v4
+        uses: actions/cache/save@5a3ec84eff668545956fd18022155c47e93e2684 # ratchet:actions/cache/save@0400d5f644dc74513175e3cd8d07132dd4860809 # v4
         with:
           path: ~/.m2/repository
           key: ${{ steps.maven-hash.outputs.key }}