diff --git a/.github/workflows/_request.yml b/.github/workflows/_request.yml
index 7f75f9877ff98..0b05f14100ff8 100644
--- a/.github/workflows/_request.yml
+++ b/.github/workflows/_request.yml
@@ -151,14 +151,14 @@ jobs:
     # TODO(phlax): shift this to ci/request action above
     - name: Check Docker cache (x64)
       id: cache-exists-docker-x64
-      uses: actions/cache/restore@0400d5f644dc74513175e3cd8d07132dd4860809  # v4.2.4
+      uses: actions/cache/restore@0057852bfaa89a56745cba8c7296529d2fc39830  # v4.3.0
       with:
         lookup-only: true
         path: /tmp/cache
         key: ${{ fromJSON(steps.data.outputs.value).request.build-image.default }}
     - name: Check Docker cache (arm64)
       id: cache-exists-docker-arm64
-      uses: actions/cache/restore@0400d5f644dc74513175e3cd8d07132dd4860809  # v4.2.4
+      uses: actions/cache/restore@0057852bfaa89a56745cba8c7296529d2fc39830  # v4.3.0
       with:
         lookup-only: true
         path: /tmp/cache
diff --git a/.github/workflows/_run.yml b/.github/workflows/_run.yml
index 4fa34b68da667..ee40d16f06acd 100644
--- a/.github/workflows/_run.yml
+++ b/.github/workflows/_run.yml
@@ -276,7 +276,7 @@ jobs:
     # HACK/WORKAROUND for cache scope issue (https://github.com/envoyproxy/envoy/issues/37603)
     - if: ${{ inputs.cache-build-image }}
       id: cache-lookup
-      uses: actions/cache/restore@0400d5f644dc74513175e3cd8d07132dd4860809  # v4.2.4
+      uses: actions/cache/restore@0057852bfaa89a56745cba8c7296529d2fc39830  # v4.3.0
       with:
         lookup-only: true
         path: /tmp/cache