diff --git a/.github/workflows/bazel.yml b/.github/workflows/bazel.yml
index a0865bf..9dabf88 100644
--- a/.github/workflows/bazel.yml
+++ b/.github/workflows/bazel.yml
@@ -24,7 +24,7 @@
       - name: Download dependencies
         run: python3 utils/git-sync-deps
       - name: Mount Bazel cache
-        uses: actions/cache@ab5e6d0c87105b4c9c2047343972218f562e4319 # v4.0.1
+        uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2
         with:
           path: ~/.bazel/cache
           key: bazel-cache-${{ runner.os }}
diff --git a/.github/workflows/ios.yml b/.github/workflows/ios.yml
index cc39c9a..05e6a0e 100644
--- a/.github/workflows/ios.yml
+++ b/.github/workflows/ios.yml
@@ -12,7 +12,7 @@
           os: [ macos-12, macos-13 ]
     steps:
         - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2
-        - uses: lukka/get-cmake@139aae96315b496d9af1b5e9abe53b15ca7eece8 # v3.28.3
+        - uses: lukka/get-cmake@70abef71925015c1c8e90a1a6af4185162412d91 # v3.28.4
         - name: Download dependencies
           run: python3 utils/git-sync-deps
         # NOTE: The MacOS SDK ships universal binaries. CI should reflect this.