diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 7a46de1..f7a6504 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -52,7 +52,7 @@ jobs:
           cargo generate --path . --name deck-ci --silent --vcs none --destination "$RUNNER_TEMP/gen"
       # No toolchain pin here: rust-toolchain.toml (copied into the generated project) is
       # the single source of truth; rustup auto-installs it on the first cargo call.
-      - uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
+      - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2.9.2
         with:
           workspaces: ${{ runner.temp }}/gen/deck-ci
       # No --locked: the generated Cargo.lock's root entry is renamed at generate time, so
@@ -93,7 +93,7 @@ jobs:
         run: |
           mkdir -p "$RUNNER_TEMP/gen"
           cargo generate --path . --name deck-ci --silent --vcs none --destination "$RUNNER_TEMP/gen"
-      - uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
+      - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2.9.2
         with:
           workspaces: ${{ runner.temp }}/gen/deck-ci
       # Formatting is OS-independent, so gate `cargo fmt --check` once on the cheaper