diff --git a/.github/workflows/public-microbench.yml b/.github/workflows/public-microbench.yml
index 0f23797..015760a 100644
--- a/.github/workflows/public-microbench.yml
+++ b/.github/workflows/public-microbench.yml
@@ -34,7 +34,7 @@ jobs:
 
       # Cache cloned public subjects keyed by the manifest's frozen SHAs, so a re-run is offline.
       - name: Cache frozen subject checkouts
-        uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830  # v4
+        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae  # v5.0.5
         with:
           path: .bench/public-work/checkouts
           key: public-microbench-checkouts-${{ hashFiles('bench/public/manifest.v1.yaml') }}