diff --git a/.github/workflows/android-release.yml b/.github/workflows/android-release.yml
index 73c3425..ccaf791 100644
--- a/.github/workflows/android-release.yml
+++ b/.github/workflows/android-release.yml
@@ -115,7 +115,7 @@ jobs:
           echo "Release $TAG -> versionName=$VNAME versionCode=$VCODE prerelease=$PRERELEASE"
 
       - name: ccache
-        uses: hendrikmuhs/ccache-action@d62db5f07c26379fc4b4e0916f098a92573c3b03 # v1.2.23
+        uses: hendrikmuhs/ccache-action@f09c25b45002a07be2955cbe52e8cee55643f89d # v1.2.24
         with:
           # Release-only cache namespace. Signed release builds must not restore a
           # ccache populated by the debug workflow, which runs in the lower-trust
diff --git a/.github/workflows/android.yml b/.github/workflows/android.yml
index e229979..fb6ef4e 100644
--- a/.github/workflows/android.yml
+++ b/.github/workflows/android.yml
@@ -72,7 +72,7 @@ jobs:
         uses: gradle/actions/wrapper-validation@ed408507eac070d1f99cc633dbcf757c94c7933a # v4
 
       - name: ccache
-        uses: hendrikmuhs/ccache-action@d62db5f07c26379fc4b4e0916f098a92573c3b03 # v1.2.23
+        uses: hendrikmuhs/ccache-action@f09c25b45002a07be2955cbe52e8cee55643f89d # v1.2.24
         with:
           key: android-arm64-${{ env.N64RECOMP_COMMIT }}