diff --git a/.github/workflows/_build-android-aar.yml b/.github/workflows/_build-android-aar.yml
index b8a3a4ab5..f5acfb7df 100644
--- a/.github/workflows/_build-android-aar.yml
+++ b/.github/workflows/_build-android-aar.yml
@@ -60,7 +60,7 @@ jobs:
           echo "ANDROID_NDK_ROOT=${ANDROID_SDK_ROOT}/ndk/29.0.14206865" >> "$GITHUB_ENV"
 
       - name: Cache Gradle
-        uses: actions/cache@v5
+        uses: actions/cache@v6
         with:
           path: |
             ~/.gradle/caches
diff --git a/.github/workflows/_build-android-apk.yml b/.github/workflows/_build-android-apk.yml
index 95989be1e..c0fcf6edc 100644
--- a/.github/workflows/_build-android-apk.yml
+++ b/.github/workflows/_build-android-apk.yml
@@ -102,7 +102,7 @@ jobs:
           echo "ANDROID_NDK_ROOT=${ANDROID_SDK_ROOT}/ndk/29.0.14206865" >> "$GITHUB_ENV"
 
       - name: Cache Gradle
-        uses: actions/cache@v5
+        uses: actions/cache@v6
         with:
           path: |
             ~/.gradle/caches
diff --git a/.github/workflows/_build-cli.yml b/.github/workflows/_build-cli.yml
index 32c2ce882..cbf8e390d 100644
--- a/.github/workflows/_build-cli.yml
+++ b/.github/workflows/_build-cli.yml
@@ -68,7 +68,7 @@ jobs:
       # ~99% hit, so the cache is worth keeping there.
       - name: Restore Bazel disk cache
         if: runner.os == 'Linux'
-        uses: actions/cache@v5
+        uses: actions/cache@v6
         with:
           path: ~/.cache/bazel-disk
           key: bazel-cli-${{ runner.os }}-${{ hashFiles('MODULE.bazel.lock', 'cli/**/BUILD.bazel', 'cli/**/*.bzl') }}
diff --git a/.github/workflows/_build-docker.yml b/.github/workflows/_build-docker.yml
index dd4edfead..142fc63c6 100644
--- a/.github/workflows/_build-docker.yml
+++ b/.github/workflows/_build-docker.yml
@@ -57,7 +57,7 @@ jobs:
           path: sdk/pkg-geniex/
 
       - name: Restore Bazel disk cache
-        uses: actions/cache@v5
+        uses: actions/cache@v6
         with:
           path: ~/.cache/bazel-disk
           key: bazel-cli-${{ runner.os }}-${{ hashFiles('MODULE.bazel.lock', 'cli/**/BUILD.bazel', 'cli/**/*.bzl') }}
diff --git a/.github/workflows/_build-sdk.yml b/.github/workflows/_build-sdk.yml
index 95133a82d..e3ac0162a 100644
--- a/.github/workflows/_build-sdk.yml
+++ b/.github/workflows/_build-sdk.yml
@@ -80,7 +80,7 @@ jobs:
           version_tag: ${{ inputs.version_tag }}
 
       - name: Restore ccache
-        uses: actions/cache@v5
+        uses: actions/cache@v6
         with:
           path: ${{ github.workspace }}/.ccache
           key: ccache-sdk-${{ matrix.platform }}-${{ github.sha }}
@@ -96,7 +96,7 @@ jobs:
       # No restore-keys — a source change forces a clean rebuild instead of a
       # fuzzy restore that would re-trigger the staleness.
       - name: Restore cargo target
-        uses: actions/cache@v5
+        uses: actions/cache@v6
         with:
           path: |
             sdk/model-manager/target
@@ -128,7 +128,7 @@ jobs:
       # configure-time inputs; a change there mints a new entry, while
       # restore-keys lets unchanged-config runs reuse the previous tree.
       - name: Restore CMake build dir
-        uses: actions/cache@v5
+        uses: actions/cache@v6
         with:
           path: sdk/build-${{ matrix.preset }}
           key: cmake-build-${{ matrix.platform }}-${{ steps.tc.outputs.tag }}-${{ hashFiles('sdk/CMakeLists.txt', 'sdk/**/CMakeLists.txt', 'sdk/CMakePresets.json', 'sdk/cmake/**', 'sdk/patches/**', '.gitmodules', 'third-party/**/CMakeLists.txt', 'third-party/**/*.cmake', 'third-party/**/cmake/**') }}-${{ github.sha }}
diff --git a/.github/workflows/_test.yml b/.github/workflows/_test.yml
index 1e11c02ab..0ac7ce3a3 100644
--- a/.github/workflows/_test.yml
+++ b/.github/workflows/_test.yml
@@ -123,7 +123,7 @@ jobs:
       # on Linux. Negative patterns must follow `--`.
       - name: Restore Bazel disk cache (Linux go-test)
         if: steps.skip.outputs.skip != 'true' && inputs.language == 'go' && matrix.platform == 'linux-arm64'
-        uses: actions/cache@v5
+        uses: actions/cache@v6
         with:
           path: ~/.cache/bazel-disk
           key: bazel-go-test-${{ runner.os }}-${{ hashFiles('MODULE.bazel.lock', 'cli/**/BUILD.bazel', 'bindings/go/**/BUILD.bazel', 'cli/**/*.bzl') }}
@@ -161,7 +161,7 @@ jobs:
 
       - name: Cache HF GGUF blobs
         if: steps.skip.outputs.skip != 'true' && inputs.language != 'go'
-        uses: actions/cache@v5
+        uses: actions/cache@v6
         with:
           path: ~/.cache/geniex
           key: geniex-models-llama_cpp-${{ matrix.platform }}-v1-${{ hashFiles('tests/_models.py', 'bindings/python/tests/conftest.py') }}
diff --git a/.github/workflows/build-llama-cpp-windows.yml b/.github/workflows/build-llama-cpp-windows.yml
index 973243f87..4d8b287dc 100644
--- a/.github/workflows/build-llama-cpp-windows.yml
+++ b/.github/workflows/build-llama-cpp-windows.yml
@@ -79,7 +79,7 @@ jobs:
           ccache --max-size=5G
 
       - name: Restore ccache
-        uses: actions/cache@v5
+        uses: actions/cache@v6
         with:
           path: ${{ github.workspace }}/.ccache
           key: ccache-llama-windows-arm64-${{ steps.llama.outputs.sha }}