diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 6b947d85..0c520cf7 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -256,7 +256,7 @@ jobs:
 
       # QNBS-v3: cache Playwright browsers by version so re-runs don't re-download ~400 MB each time.
       - name: Cache Playwright browsers
-        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: ~/.cache/ms-playwright
           key: playwright-${{ runner.os }}-${{ hashFiles('**/pnpm-lock.yaml') }}
@@ -308,7 +308,7 @@ jobs:
       - uses: ./.github/actions/setup
 
       - name: Cache Playwright browsers
-        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: ~/.cache/ms-playwright
           key: playwright-${{ runner.os }}-${{ hashFiles('**/pnpm-lock.yaml') }}
@@ -391,7 +391,7 @@ jobs:
 
       # QNBS-v3: Cache Playwright browsers between runs — saves ~60 s install time.
       - name: Cache Playwright browsers
-        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: ~/.cache/ms-playwright
           key: playwright-chromium-${{ runner.os }}-${{ hashFiles('pnpm-lock.yaml') }}
diff --git a/.github/workflows/mutation.yml b/.github/workflows/mutation.yml
index 81a2fc4b..7f1f9e3c 100644
--- a/.github/workflows/mutation.yml
+++ b/.github/workflows/mutation.yml
@@ -70,7 +70,7 @@ jobs:
       # === Incremental cache (per module) ===
       - name: Restore Stryker incremental cache
         id: cache-incremental
-        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: reports/stryker-incremental-${{ matrix.name }}.json
           key: stryker-incremental-${{ matrix.name }}-${{ github.sha }}
diff --git a/.github/workflows/voice-nightly.yml b/.github/workflows/voice-nightly.yml
index 611b7e47..78f3efd3 100644
--- a/.github/workflows/voice-nightly.yml
+++ b/.github/workflows/voice-nightly.yml
@@ -29,7 +29,7 @@ jobs:
       - uses: ./.github/actions/setup
 
       - name: Cache Playwright browsers
-        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: ~/.cache/ms-playwright
           # QNBS-v3: the lockfile hash already changes when @playwright/test bumps, so this key is