diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 4041d2f..23e6309 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -213,7 +213,7 @@ jobs:
         with:
           key: test-${{ matrix.os }}-${{ matrix.rust }}
       # Pre-cache the ONNX model so embedded-detector tests don't each fetch it.
-      - uses: actions/cache@v4
+      - uses: actions/cache@v6
         with:
           path: ~/.cache/jailguard
           key: jailguard-onnx-minilm-v1
@@ -281,7 +281,7 @@ jobs:
         with:
           key: coverage
       - uses: taiki-e/install-action@cargo-llvm-cov
-      - uses: actions/cache@v4
+      - uses: actions/cache@v6
         with:
           path: ~/.cache/jailguard
           key: jailguard-onnx-minilm-v1
diff --git a/.github/workflows/elixir.yml b/.github/workflows/elixir.yml
index ff794aa..73d2bce 100644
--- a/.github/workflows/elixir.yml
+++ b/.github/workflows/elixir.yml
@@ -85,7 +85,7 @@ jobs:
           workspaces: "elixir/native/jailguard_nif -> target"
 
       - name: Cache hex + mix deps
-        uses: actions/cache@v4
+        uses: actions/cache@v6
         with:
           path: |
             elixir/deps
@@ -95,7 +95,7 @@ jobs:
             mix-${{ runner.os }}-otp${{ matrix.otp }}-elixir${{ matrix.elixir }}-
 
       # Pre-cache the ONNX model so the test setup_all download is a no-op.
-      - uses: actions/cache@v4
+      - uses: actions/cache@v6
         with:
           path: ~/.cache/jailguard
           key: jailguard-onnx-minilm-v1