diff --git a/.github/workflows/claude-pr-review.yml b/.github/workflows/claude-pr-review.yml
index 780cb4d..4c982a4 100644
--- a/.github/workflows/claude-pr-review.yml
+++ b/.github/workflows/claude-pr-review.yml
@@ -40,7 +40,7 @@ jobs:
           node-version-file: ".nvmrc"
 
       - name: Cache npm tools
-        uses: actions/cache@8b402f58fbc84540c8b491a91e594a4576fec3d7 # v5.0.2
+        uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
         id: claude-pr-review-npm-tools-cache
         with:
           path: ~/.npm
diff --git a/.github/workflows/claude.yml b/.github/workflows/claude.yml
index 0117543..e8a7c3b 100644
--- a/.github/workflows/claude.yml
+++ b/.github/workflows/claude.yml
@@ -64,7 +64,7 @@ jobs:
           node-version-file: ".nvmrc"
 
       - name: Cache npm tools
-        uses: actions/cache@8b402f58fbc84540c8b491a91e594a4576fec3d7 # v5.0.2
+        uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
         id: at-claude-npm-tools-cache
         with:
           path: ~/.npm
diff --git a/.github/workflows/links.yml b/.github/workflows/links.yml
index 74897a9..5504ed4 100644
--- a/.github/workflows/links.yml
+++ b/.github/workflows/links.yml
@@ -38,7 +38,7 @@ jobs:
       # Split restore/save pattern ensures cache is saved even on failure
       - name: Restore lychee cache
         id: restore-cache
-        uses: actions/cache/restore@8b402f58fbc84540c8b491a91e594a4576fec3d7 # v5.0.2
+        uses: actions/cache/restore@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
         with:
           path: .lycheecache
           key: cache-lychee-v1
@@ -58,7 +58,7 @@ jobs:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Save lychee cache
-        uses: actions/cache/save@8b402f58fbc84540c8b491a91e594a4576fec3d7 # v5.0.2
+        uses: actions/cache/save@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
         if: always()
         with:
           path: .lycheecache
diff --git a/.github/workflows/validate-workflows.yml b/.github/workflows/validate-workflows.yml
index 864f347..b5bd284 100644
--- a/.github/workflows/validate-workflows.yml
+++ b/.github/workflows/validate-workflows.yml
@@ -30,7 +30,7 @@ jobs:
           persist-credentials: false
 
       - name: Run actionlint with reviewdog
-        uses: reviewdog/action-actionlint@83e4ed25b168066ad8f62f5afbb29ebd8641d982 # v1.69.1
+        uses: reviewdog/action-actionlint@e58ee9d111489c31395fbe4857b0be6e7635dbda # v1.70.0
         with:
           reporter: github-pr-review
           fail_level: error