diff --git a/.github/workflows/_request.yml b/.github/workflows/_request.yml
index db7a9062bf151..feefcbad5c63b 100644
--- a/.github/workflows/_request.yml
+++ b/.github/workflows/_request.yml
@@ -176,14 +176,14 @@ jobs:
     # TODO(phlax): shift this to ci/request action above
     - name: Check Docker cache (x64)
       id: cache-exists-docker-x64
-      uses: actions/cache/restore@8b402f58fbc84540c8b491a91e594a4576fec3d7  # v5.0.2
+      uses: actions/cache/restore@cdf6c1fa76f9f475f3d7449005a359c84ca0f306  # v5.0.3
       with:
         lookup-only: true
         path: /tmp/cache
         key: ${{ fromJSON(steps.data.outputs.value).request.build-image.default }}
     - name: Check Docker cache (arm64)
       id: cache-exists-docker-arm64
-      uses: actions/cache/restore@8b402f58fbc84540c8b491a91e594a4576fec3d7  # v5.0.2
+      uses: actions/cache/restore@cdf6c1fa76f9f475f3d7449005a359c84ca0f306  # v5.0.3
       with:
         lookup-only: true
         path: /tmp/cache
diff --git a/.github/workflows/_run.yml b/.github/workflows/_run.yml
index caff26bb8420a..be5bd08bc8614 100644
--- a/.github/workflows/_run.yml
+++ b/.github/workflows/_run.yml
@@ -312,7 +312,7 @@ jobs:
     # HACK/WORKAROUND for cache scope issue (https://github.com/envoyproxy/envoy/issues/37603)
     - if: ${{ inputs.cache-build-image }}
       id: cache-lookup
-      uses: actions/cache/restore@8b402f58fbc84540c8b491a91e594a4576fec3d7  # v5.0.2
+      uses: actions/cache/restore@cdf6c1fa76f9f475f3d7449005a359c84ca0f306  # v5.0.3
       with:
         lookup-only: true
         path: /tmp/cache