diff --git a/.github/workflows/push-email-notify.yml b/.github/workflows/push-email-notify.yml
index 91c2471..5061213 100644
--- a/.github/workflows/push-email-notify.yml
+++ b/.github/workflows/push-email-notify.yml
@@ -16,7 +16,7 @@ jobs:
     timeout-minutes: 5
     steps:
       - name: Send push notification email
-        uses: dawidd6/action-send-mail@5cdad7c44dc8037605651ac816add36f83fc7cc8 # pinned
+        uses: dawidd6/action-send-mail@8de3c312702ac7a63fc4035d45a2a51811eb669a # pinned
         with:
           server_address: ${{ secrets.SMTP_HOST }}
           server_port: ${{ secrets.SMTP_PORT }}
diff --git a/.github/workflows/rust-ci.yml b/.github/workflows/rust-ci.yml
index 948f708..5136300 100644
--- a/.github/workflows/rust-ci.yml
+++ b/.github/workflows/rust-ci.yml
@@ -51,7 +51,7 @@ jobs:
           toolchain: stable   # required when SHA-pinned (no rust-toolchain.toml in repo)
 
       - name: Cache cargo registry and build
-        uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2
+        uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2
         with:
           key: no-default-features
 
@@ -91,7 +91,7 @@ jobs:
           toolchain: stable   # required when SHA-pinned (no rust-toolchain.toml in repo)
 
       - name: Cache cargo registry and build
-        uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2
+        uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2
         with:
           key: wasm-validate
 
diff --git a/.github/workflows/status-gate.yml b/.github/workflows/status-gate.yml
index 30048fa..5928c73 100644
--- a/.github/workflows/status-gate.yml
+++ b/.github/workflows/status-gate.yml
@@ -62,7 +62,7 @@ jobs:
         with:
           toolchain: stable   # required input when the action is SHA-pinned (the `stable` ref's default is not inherited by SHA)
       - name: Cache cargo
-        uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2
+        uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2
       - name: Test-count drift (full build — slow)
         env:
           CARGO_INCREMENTAL: "0"