diff --git a/.github/workflows/android.yml b/.github/workflows/android.yml
index a188e501..f91e9e38 100644
--- a/.github/workflows/android.yml
+++ b/.github/workflows/android.yml
@@ -122,7 +122,7 @@ jobs:
         with:
           toolchain: 1.97.1
           targets: aarch64-linux-android
-      - uses: Swatinem/rust-cache@e18b497796c12c097a38f9edb9d0641fb99eee32
+      - uses: Swatinem/rust-cache@c8037a86dde8214a8310e9f54a8fc61ab362aa31
         with:
           shared-key: android-ssh
       - uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6
@@ -236,7 +236,7 @@ jobs:
         with:
           toolchain: 1.97.1
           targets: aarch64-linux-android
-      - uses: Swatinem/rust-cache@e18b497796c12c097a38f9edb9d0641fb99eee32
+      - uses: Swatinem/rust-cache@c8037a86dde8214a8310e9f54a8fc61ab362aa31
       - uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6
         with:
           distribution: temurin
diff --git a/.github/workflows/build-app-server-target.yml b/.github/workflows/build-app-server-target.yml
index dddb49a7..388aa55d 100644
--- a/.github/workflows/build-app-server-target.yml
+++ b/.github/workflows/build-app-server-target.yml
@@ -27,7 +27,7 @@ jobs:
       - uses: dtolnay/rust-toolchain@4360b52568e2003a75bf9bc1d59f33a8e3fc893c
         with:
           toolchain: 1.97.1
-      - uses: Swatinem/rust-cache@e18b497796c12c097a38f9edb9d0641fb99eee32 # v2
+      - uses: Swatinem/rust-cache@c8037a86dde8214a8310e9f54a8fc61ab362aa31 # v2
       - name: Resolve target contract
         id: target
         shell: bash
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index c9ff0349..484b8538 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -27,7 +27,7 @@ jobs:
       - uses: dtolnay/rust-toolchain@4360b52568e2003a75bf9bc1d59f33a8e3fc893c
         with:
           toolchain: 1.97.1
-      - uses: Swatinem/rust-cache@e18b497796c12c097a38f9edb9d0641fb99eee32 # v2
+      - uses: Swatinem/rust-cache@c8037a86dde8214a8310e9f54a8fc61ab362aa31 # v2
       - run: npm ci
       - run: npm run check
 
@@ -40,7 +40,7 @@ jobs:
         with:
           toolchain: 1.97.1
           components: rustfmt, clippy
-      - uses: Swatinem/rust-cache@e18b497796c12c097a38f9edb9d0641fb99eee32 # v2
+      - uses: Swatinem/rust-cache@c8037a86dde8214a8310e9f54a8fc61ab362aa31 # v2
       - run: cargo fmt --all --check
       - run: cargo clippy --locked --workspace --all-targets -- -D warnings
       - run: cargo test --locked --workspace
@@ -72,7 +72,7 @@ jobs:
       - uses: dtolnay/rust-toolchain@4360b52568e2003a75bf9bc1d59f33a8e3fc893c
         with:
           toolchain: 1.97.1
-      - uses: Swatinem/rust-cache@e18b497796c12c097a38f9edb9d0641fb99eee32 # v2
+      - uses: Swatinem/rust-cache@c8037a86dde8214a8310e9f54a8fc61ab362aa31 # v2
       - name: Install the pinned managed runtime
         working-directory: openaide-rs/app-server/assets/codex-acp-runtime
         run: npm ci --ignore-scripts --omit=dev --no-audit --no-fund
@@ -100,7 +100,7 @@ jobs:
       - uses: dtolnay/rust-toolchain@4360b52568e2003a75bf9bc1d59f33a8e3fc893c
         with:
           toolchain: 1.97.1
-      - uses: Swatinem/rust-cache@e18b497796c12c097a38f9edb9d0641fb99eee32 # v2
+      - uses: Swatinem/rust-cache@c8037a86dde8214a8310e9f54a8fc61ab362aa31 # v2
       - run: npm ci
       # The GitHub-hosted image already supplies Chrome and its system dependencies.
       # Keep mirror-dependent apt provisioning off the PR critical path.
@@ -127,7 +127,7 @@ jobs:
       - uses: dtolnay/rust-toolchain@4360b52568e2003a75bf9bc1d59f33a8e3fc893c
         with:
           toolchain: 1.97.1
-      - uses: Swatinem/rust-cache@e18b497796c12c097a38f9edb9d0641fb99eee32 # v2
+      - uses: Swatinem/rust-cache@c8037a86dde8214a8310e9f54a8fc61ab362aa31 # v2
       - run: npm ci
       - run: npm run build
       # Exercise the pinned native recovery contract before a release tag exists,
diff --git a/.github/workflows/package-desktop-target.yml b/.github/workflows/package-desktop-target.yml
index a2738ff5..e48596ff 100644
--- a/.github/workflows/package-desktop-target.yml
+++ b/.github/workflows/package-desktop-target.yml
@@ -70,7 +70,7 @@ jobs:
       - uses: dtolnay/rust-toolchain@4360b52568e2003a75bf9bc1d59f33a8e3fc893c
         with:
           toolchain: 1.97.1
-      - uses: Swatinem/rust-cache@e18b497796c12c097a38f9edb9d0641fb99eee32 # v2
+      - uses: Swatinem/rust-cache@c8037a86dde8214a8310e9f54a8fc61ab362aa31 # v2
         with:
           workspaces: apps/desktop/src-tauri
       - run: npm ci