diff --git a/.github/workflows/validate-renovate-config.yaml b/.github/workflows/validate-renovate-config.yaml
index a69f727..72452d8 100644
--- a/.github/workflows/validate-renovate-config.yaml
+++ b/.github/workflows/validate-renovate-config.yaml
@@ -38,7 +38,7 @@ jobs:
         run: echo "renovate-version=$(npm view renovate version)" >> ${GITHUB_OUTPUT}
 
       - name: global npm cache
-        uses: actions/cache@6849a6489940f00c2f30c0fb92c6274307ccb58a # v4.1.2
+        uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
         with:
           path: ${{ steps.npm-cache-dir.outputs.dir }}
           key: ${{ runner.os }}-node-${{ steps.setup-node.outputs.node-version }}-renovate-${{ steps.npm-renovate-version.outputs.renovate-version }}
diff --git a/workflow-templates/renovate-config-validator.yml b/workflow-templates/renovate-config-validator.yml
index 96abb83..71e3c56 100644
--- a/workflow-templates/renovate-config-validator.yml
+++ b/workflow-templates/renovate-config-validator.yml
@@ -50,7 +50,7 @@ jobs:
         run: echo "renovate-version=$(npm view renovate version)" >> ${GITHUB_OUTPUT}
 
       - name: global npm cache
-        uses: actions/cache@6849a6489940f00c2f30c0fb92c6274307ccb58a # v4.1.2
+        uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
         with:
           path: ${{ steps.npm-cache-dir.outputs.dir }}
           key: ${{ runner.os }}-node-${{ steps.setup-node.outputs.node-version }}-renovate-${{ steps.npm-renovate-version.outputs.renovate-version }}