diff --git a/.github/workflows/publish-release.yml b/.github/workflows/publish-release.yml
index f9e8d056..8d6bcf51 100644
--- a/.github/workflows/publish-release.yml
+++ b/.github/workflows/publish-release.yml
@@ -40,7 +40,7 @@ jobs:
           distribution: 'temurin'
           java-version: '21'
       - name: Cache local Maven repository
-        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae #v5.0.5
+        uses: actions/cache@2c8a9bd7457de244a408f35966fab2fb45fda9c8 #v6.0.0
         with:
           path: |
             ~/.m2/repository
@@ -103,7 +103,7 @@ jobs:
           gpg-private-key: ${{ secrets.PMD_CI_GPG_PRIVATE_KEY }}
 
       - name: Cache local Maven repository
-        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae #v5.0.5
+        uses: actions/cache@2c8a9bd7457de244a408f35966fab2fb45fda9c8 #v6.0.0
         with:
           path: |
             ~/.m2/repository
diff --git a/.github/workflows/publish-snapshot.yml b/.github/workflows/publish-snapshot.yml
index dca0c373..58c73ef1 100644
--- a/.github/workflows/publish-snapshot.yml
+++ b/.github/workflows/publish-snapshot.yml
@@ -39,7 +39,7 @@ jobs:
           distribution: temurin
           java-version: '21'
       - name: Cache local Maven repository
-        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae #v5.0.5
+        uses: actions/cache@2c8a9bd7457de244a408f35966fab2fb45fda9c8 #v6.0.0
         with:
           path: |
             ~/.m2/repository
@@ -93,7 +93,7 @@ jobs:
           gpg-private-key: ${{ secrets.PMD_CI_GPG_PRIVATE_KEY }}
 
       - name: Cache local Maven repository
-        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae #v5.0.5
+        uses: actions/cache@2c8a9bd7457de244a408f35966fab2fb45fda9c8 #v6.0.0
         with:
           path: |
             ~/.m2/repository