diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 0ff59a83..be654c1b 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -31,7 +31,7 @@ jobs:
       - uses: actions/checkout@v7
 
       - name: Cache cargo registry
-        uses: actions/cache@v4
+        uses: actions/cache@v6
         with:
           path: ~/.cargo/registry
           key: ${{ runner.os }}-cargo-registry-${{ hashFiles('**/Cargo.lock') }}
@@ -39,7 +39,7 @@ jobs:
             ${{ runner.os }}-cargo-registry-
 
       - name: Cache cargo index
-        uses: actions/cache@v4
+        uses: actions/cache@v6
         with:
           path: ~/.cargo/git
           key: ${{ runner.os }}-cargo-git-${{ hashFiles('**/Cargo.lock') }}
@@ -73,7 +73,7 @@ jobs:
         run: cargo test --workspace --exclude zradar-functional-tests
 
       - name: Cache test fixtures
-        uses: actions/cache@v4
+        uses: actions/cache@v6
         with:
           # Cache only generated binpb/json outputs, NOT build.rs source — restoring
           # source files via restore-keys fallback would silently overwrite new source
diff --git a/.github/workflows/sdk-drift.yml b/.github/workflows/sdk-drift.yml
index 4491c9bc..750d0a1c 100644
--- a/.github/workflows/sdk-drift.yml
+++ b/.github/workflows/sdk-drift.yml
@@ -13,7 +13,7 @@ jobs:
     steps:
       - uses: actions/checkout@v7
 
-      - uses: actions/setup-python@v6
+      - uses: actions/setup-python@v7
         with:
           python-version: '3.12'