diff --git a/.forgejo/workflows/check.yml b/.forgejo/workflows/check.yml
index b611423..8e4c29e 100644
--- a/.forgejo/workflows/check.yml
+++ b/.forgejo/workflows/check.yml
@@ -22,7 +22,7 @@ jobs:
       # package-lock.json is gitignored, so cache the global npm download cache
       # keyed on package.json rather than relying on `npm ci` + a lockfile.
       - name: Cache npm dependencies
-        uses: actions/cache@v4
+        uses: actions/cache@v6
         with:
           path: ~/.npm
           key: ${{ runner.os }}-npm-${{ hashFiles('package.json') }}
diff --git a/.forgejo/workflows/publish.yml b/.forgejo/workflows/publish.yml
index ea3663b..ec2f5fc 100644
--- a/.forgejo/workflows/publish.yml
+++ b/.forgejo/workflows/publish.yml
@@ -24,7 +24,7 @@ jobs:
           check-latest: true
 
       - name: Cache npm dependencies
-        uses: actions/cache@v4
+        uses: actions/cache@v6
         with:
           path: ~/.npm
           key: ${{ runner.os }}-npm-${{ hashFiles('package.json') }}
@@ -69,7 +69,7 @@ jobs:
           registry-url: 'https://registry.npmjs.org'
 
       - name: Cache npm dependencies
-        uses: actions/cache@v4
+        uses: actions/cache@v6
         with:
           path: ~/.npm
           key: ${{ runner.os }}-npm-${{ hashFiles('package.json') }}