diff --git a/.github/workflows/build-sea.yml b/.github/workflows/build-sea.yml
index 98f38cb6c..012917bcd 100644
--- a/.github/workflows/build-sea.yml
+++ b/.github/workflows/build-sea.yml
@@ -91,7 +91,7 @@ jobs:
 
       - name: Restore build-deps cache
         id: deps-cache
-        uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
+        uses: actions/cache@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1
         with:
           path: |
             packages/bootstrap/dist/
@@ -246,7 +246,7 @@ jobs:
       - name: Restore Yoga Layout WASM cache
         if: steps.check-platform.outputs.should-run == 'true'
         id: yoga-cache
-        uses: actions/cache/restore@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
+        uses: actions/cache/restore@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1
         with:
           path: packages/yoga-layout/build/wasm
           key: yoga-wasm-${{ steps.wasm-cache-keys.outputs.yoga-hash }}
@@ -256,7 +256,7 @@ jobs:
       # - name: Restore AI models cache
       #   if: steps.check-platform.outputs.should-run == 'true'
       #   id: ai-cache
-      #   uses: actions/cache/restore@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
+      #   uses: actions/cache/restore@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1
       #   with:
       #     path: packages/socketbin-cli-ai/dist
       #     key: ai-models-${{ steps.wasm-cache-keys.outputs.ai-hash }}
@@ -265,7 +265,7 @@ jobs:
 
       # - name: Restore ONNX Runtime cache
       #   id: onnx-cache
-      #   uses: actions/cache/restore@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
+      #   uses: actions/cache/restore@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1
       #   with:
       #     path: packages/onnxruntime/dist
       #     key: onnx-runtime-${{ steps.wasm-cache-keys.outputs.onnx-hash }}
@@ -345,7 +345,7 @@ jobs:
       - name: Cache Emscripten SDK (non-Windows)
         if: steps.check-platform.outputs.should-run == 'true' && steps.yoga-cache-valid.outputs.valid != 'true' && matrix.os != 'windows'
         id: emsdk-cache
-        uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
+        uses: actions/cache@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1
         with:
           path: emsdk
           key: emsdk-${{ runner.os }}-3.1.69
@@ -353,7 +353,7 @@ jobs:
 
       # - name: Cache pip packages
       #   if: steps.check-platform.outputs.should-run == 'true' && steps.ai-cache-valid.outputs.valid != 'true'
-      #   uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
+      #   uses: actions/cache@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1
       #   with:
       #     path: ~/.cache/pip
       #     key: pip-${{ runner.os }}-py3.11-${{ hashFiles('**/requirements*.txt') }}-onnx-torch
@@ -459,7 +459,7 @@ jobs:
       - name: Restore SEA binary cache
         if: steps.check-platform.outputs.should-run == 'true' && inputs.force != true
         id: sea-cache
-        uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
+        uses: actions/cache@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1
         with:
           path: packages/node-sea-builder/dist/sea/
           key: node-sea-${{ matrix.platform }}-${{ matrix.arch }}-${{ steps.sea-cache-key.outputs.hash }}
diff --git a/.github/workflows/build-smol.yml b/.github/workflows/build-smol.yml
index 18070d9ea..4223f04c9 100644
--- a/.github/workflows/build-smol.yml
+++ b/.github/workflows/build-smol.yml
@@ -91,7 +91,7 @@ jobs:
 
       - name: Restore build-deps cache
         id: deps-cache
-        uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
+        uses: actions/cache@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1
         with:
           path: |
             packages/bootstrap/dist/
@@ -254,7 +254,7 @@ jobs:
       - name: Restore smol build cache
         if: inputs.force != true
         id: smol-build-cache
-        uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
+        uses: actions/cache@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1
         with:
           path: packages/node-smol-builder/build
           key: node-smol-build-${{ matrix.platform }}-${{ matrix.arch }}-${{ steps.smol-cache-key.outputs.hash }}
@@ -264,7 +264,7 @@ jobs:
       - name: Restore smol stripped binary cache
         if: inputs.force != true
         id: smol-stripped-cache
-        uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
+        uses: actions/cache@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1
         with:
           path: packages/node-smol-builder/build/out/Stripped
           key: node-smol-stripped-${{ matrix.platform }}-${{ matrix.arch }}-${{ steps.smol-cache-key.outputs.hash }}
@@ -273,7 +273,7 @@ jobs:
       - name: Restore smol binary cache
         if: inputs.force != true
         id: smol-cache
-        uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
+        uses: actions/cache@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1
         with:
           path: packages/node-smol-builder/dist/socket-smol-${{ matrix.platform }}-${{ matrix.arch }}
           key: node-smol-${{ matrix.platform }}-${{ matrix.arch }}-${{ steps.smol-cache-key.outputs.hash }}
@@ -370,7 +370,7 @@ jobs:
       - name: Cache Ninja (Ubuntu)
         if: (steps.smol-cache-valid.outputs.valid != 'true' || inputs.force) && matrix.platform == 'linux'
         id: ninja-cache-ubuntu
-        uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
+        uses: actions/cache@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1
         with:
           path: /usr/bin/ninja
           key: ninja-ubuntu-${{ runner.os }}-${{ runner.arch }}
@@ -382,7 +382,7 @@ jobs:
       - name: Cache Ninja (macOS)
         if: (steps.smol-cache-valid.outputs.valid != 'true' || inputs.force) && matrix.platform == 'darwin'
         id: ninja-cache-macos
-        uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
+        uses: actions/cache@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1
         with:
           path: |
             /usr/local/bin/ninja
@@ -396,7 +396,7 @@ jobs:
       - name: Cache Ninja (Windows)
         if: (steps.smol-cache-valid.outputs.valid != 'true' || inputs.force) && matrix.platform == 'win32'
         id: ninja-cache-windows
-        uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
+        uses: actions/cache@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1
         with:
           path: C:\ProgramData\chocolatey\bin\ninja.exe
           key: ninja-windows-${{ runner.os }}-${{ runner.arch }}
diff --git a/.github/workflows/build-wasm.yml b/.github/workflows/build-wasm.yml
index 628089aba..4c3cc323c 100644
--- a/.github/workflows/build-wasm.yml
+++ b/.github/workflows/build-wasm.yml
@@ -105,7 +105,7 @@ jobs:
 
       - name: Restore yoga output cache
         id: yoga-cache
-        uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
+        uses: actions/cache@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1
         with:
           path: packages/yoga-layout/build/wasm
           key: yoga-wasm-${{ steps.yoga-cache-key.outputs.hash }}
@@ -114,7 +114,7 @@ jobs:
 
       - name: Restore yoga build cache
         id: yoga-build-cache
-        uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
+        uses: actions/cache@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1
         with:
           path: packages/yoga-layout/build
           key: yoga-build-${{ steps.yoga-cache-key.outputs.hash }}
@@ -212,7 +212,7 @@ jobs:
           python-version: '3.11'
 
       - name: Cache pip packages
-        uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
+        uses: actions/cache@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1
         with:
           path: ~/.cache/pip
           key: pip-${{ runner.os }}-py3.13-${{ hashFiles('**/requirements*.txt') }}-onnx-torch
@@ -254,7 +254,7 @@ jobs:
 
       - name: Restore models cache
         id: models-cache
-        uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
+        uses: actions/cache@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1
         with:
           path: packages/models/dist
           key: models-${{ steps.models-cache-key.outputs.hash }}
@@ -386,7 +386,7 @@ jobs:
 
       - name: Restore ONNX Runtime output cache
         id: onnx-cache
-        uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
+        uses: actions/cache@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1
         with:
           path: packages/onnxruntime/build/wasm
           key: onnx-runtime-${{ steps.onnx-cache-key.outputs.hash }}
@@ -395,7 +395,7 @@ jobs:
 
       - name: Restore ONNX Runtime build cache
         id: onnx-build-cache
-        uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
+        uses: actions/cache@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1
         with:
           path: packages/onnxruntime/build
           key: onnx-runtime-build-${{ steps.onnx-cache-key.outputs.hash }}
@@ -417,7 +417,7 @@ jobs:
 
       - name: Cache Emscripten SDK
         id: emsdk-cache
-        uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
+        uses: actions/cache@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1
         with:
           path: emsdk
           key: emsdk-${{ runner.os }}-4.0.18
@@ -470,7 +470,7 @@ jobs:
 
       - name: Save ONNX Runtime build cache
         if: always() && (steps.onnx-cache-valid.outputs.valid != 'true' || inputs.force)
-        uses: actions/cache/save@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
+        uses: actions/cache/save@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1
         with:
           path: packages/onnxruntime/build
           key: onnx-runtime-build-${{ steps.onnx-cache-key.outputs.hash }}
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index d833940e3..c20ea2024 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -110,7 +110,7 @@ jobs:
 
       - name: Restore SEA binary cache
         id: sea-cache
-        uses: actions/cache/restore@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
+        uses: actions/cache/restore@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1
         with:
           path: packages/node-sea-builder/dist/sea/
           key: node-sea-linux-x64-${{ steps.cache-keys.outputs.sea-hash }}
@@ -118,7 +118,7 @@ jobs:
 
       - name: Restore smol binary cache
         id: smol-cache
-        uses: actions/cache/restore@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
+        uses: actions/cache/restore@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1
         with:
           path: packages/node-smol-builder/dist/
           key: node-smol-linux-x64-${{ steps.cache-keys.outputs.smol-hash }}
diff --git a/.github/workflows/provenance.yml b/.github/workflows/provenance.yml
index 20a450b5c..f578cef24 100644
--- a/.github/workflows/provenance.yml
+++ b/.github/workflows/provenance.yml
@@ -48,7 +48,7 @@ jobs:
           scope: '@socketsecurity'
       - name: Cache yoga-layout WASM
         id: cache-yoga
-        uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
+        uses: actions/cache@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1
         with:
           path: packages/yoga-layout/build/wasm
           key: yoga-wasm-${{ hashFiles('packages/yoga-layout/package.json', 'packages/yoga-layout/yoga/**') }}
diff --git a/.github/workflows/publish-socketbin.yml b/.github/workflows/publish-socketbin.yml
index 4423956f2..56fddd642 100644
--- a/.github/workflows/publish-socketbin.yml
+++ b/.github/workflows/publish-socketbin.yml
@@ -153,7 +153,7 @@ jobs:
       - name: Restore build-deps cache for smol
         if: inputs.method == 'smol' || inputs.method == 'smol-sea'
         id: smol-deps-cache
-        uses: actions/cache/restore@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
+        uses: actions/cache/restore@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1
         with:
           path: |
             packages/bootstrap/dist/
@@ -187,7 +187,7 @@ jobs:
       - name: Restore smol binary cache
         if: inputs.method == 'smol' || inputs.method == 'smol-sea'
         id: smol-cache
-        uses: actions/cache/restore@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
+        uses: actions/cache/restore@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1
         with:
           path: packages/node-smol-builder/dist/socket-smol-${{ matrix.platform }}-${{ matrix.arch }}${{ matrix.os == 'windows' && '.exe' || '' }}
           key: node-smol-${{ matrix.platform }}-${{ matrix.arch }}-${{ steps.smol-cache-key.outputs.hash }}
@@ -233,7 +233,7 @@ jobs:
       - name: Restore build-deps cache
         if: inputs.method == 'sea' || inputs.method == 'smol-sea'
         id: deps-cache
-        uses: actions/cache/restore@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
+        uses: actions/cache/restore@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1
         with:
           path: |
             packages/bootstrap/dist/
@@ -266,7 +266,7 @@ jobs:
       - name: Restore SEA binary cache
         if: inputs.method == 'sea' || inputs.method == 'smol-sea'
         id: sea-cache
-        uses: actions/cache/restore@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
+        uses: actions/cache/restore@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1
         with:
           path: packages/node-sea-builder/dist/sea/
           key: node-sea-${{ matrix.platform }}-${{ matrix.arch }}-${{ steps.sea-cache-key.outputs.hash }}