diff --git a/.github/workflows/_request.yml b/.github/workflows/_request.yml
index 1b4f6c8177417..5afc15791be32 100644
--- a/.github/workflows/_request.yml
+++ b/.github/workflows/_request.yml
@@ -164,14 +164,14 @@ jobs:
     # TODO(phlax): shift this to ci/request action above
     - name: Check Docker cache (x64)
       id: cache-exists-docker-x64
-      uses: actions/cache/restore@9255dc7a253b0ccc959486e2bca901246202afeb  # v5.0.1
+      uses: actions/cache/restore@8b402f58fbc84540c8b491a91e594a4576fec3d7  # v5.0.2
       with:
         lookup-only: true
         path: /tmp/cache
         key: ${{ fromJSON(steps.data.outputs.value).request.build-image.default }}
     - name: Check Docker cache (arm64)
       id: cache-exists-docker-arm64
-      uses: actions/cache/restore@9255dc7a253b0ccc959486e2bca901246202afeb  # v5.0.1
+      uses: actions/cache/restore@8b402f58fbc84540c8b491a91e594a4576fec3d7  # v5.0.2
       with:
         lookup-only: true
         path: /tmp/cache
diff --git a/.github/workflows/_run.yml b/.github/workflows/_run.yml
index 5edc6cc511756..a7b718220e497 100644
--- a/.github/workflows/_run.yml
+++ b/.github/workflows/_run.yml
@@ -295,7 +295,7 @@ jobs:
     # HACK/WORKAROUND for cache scope issue (https://github.com/envoyproxy/envoy/issues/37603)
     - if: ${{ inputs.cache-build-image }}
       id: cache-lookup
-      uses: actions/cache/restore@9255dc7a253b0ccc959486e2bca901246202afeb  # v5.0.1
+      uses: actions/cache/restore@8b402f58fbc84540c8b491a91e594a4576fec3d7  # v5.0.2
       with:
         lookup-only: true
         path: /tmp/cache