diff --git a/.github/workflows/validate-renovate-config.yaml b/.github/workflows/validate-renovate-config.yaml
index bdea4a4..b6e02ea 100644
--- a/.github/workflows/validate-renovate-config.yaml
+++ b/.github/workflows/validate-renovate-config.yaml
@@ -38,7 +38,7 @@ jobs:
         run: echo "renovate-version=$(npm view renovate version)" >> ${GITHUB_OUTPUT}
 
       - name: global npm cache
-        uses: actions/cache@e12d46a63a90f2fae62d114769bbf2a179198b5c # v3.3.3
+        uses: actions/cache@13aacd865c20de90d75de3b17ebe84f7a17d57d2 # v4.0.0
         with:
           path: ${{ steps.npm-cache-dir.outputs.dir }}
           key: ${{ runner.os }}-node-${{ steps.setup-node.outputs.node-version }}-renovate-${{ steps.npm-renovate-version.outputs.renovate-version }}
diff --git a/workflow-templates/renovate-config-validator.yml b/workflow-templates/renovate-config-validator.yml
index fdc7e3b..a06175f 100644
--- a/workflow-templates/renovate-config-validator.yml
+++ b/workflow-templates/renovate-config-validator.yml
@@ -50,7 +50,7 @@ jobs:
         run: echo "renovate-version=$(npm view renovate version)" >> ${GITHUB_OUTPUT}
 
       - name: global npm cache
-        uses: actions/cache@e12d46a63a90f2fae62d114769bbf2a179198b5c # v3.3.3
+        uses: actions/cache@13aacd865c20de90d75de3b17ebe84f7a17d57d2 # v4.0.0
         with:
           path: ${{ steps.npm-cache-dir.outputs.dir }}
           key: ${{ runner.os }}-node-${{ steps.setup-node.outputs.node-version }}-renovate-${{ steps.npm-renovate-version.outputs.renovate-version }}