diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 9593889..31c51bd 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -52,7 +52,7 @@ jobs:
         with:
           components: clippy
       - uses: Swatinem/rust-cache@v2
-      - uses: taiki-e/install-action@v2.85.6
+      - uses: taiki-e/install-action@v2.85.10
         with:
           tool: cargo-hack
       - name: Clippy powerset
@@ -78,7 +78,7 @@ jobs:
       - uses: actions/checkout@v7
       - uses: dtolnay/rust-toolchain@1.95.0
       - uses: Swatinem/rust-cache@v2
-      - uses: taiki-e/install-action@v2.85.6
+      - uses: taiki-e/install-action@v2.85.10
         with:
           tool: cargo-hack,cargo-nextest
       - name: Test powerset
diff --git a/.github/workflows/nightly-cargo-audit.yml b/.github/workflows/nightly-cargo-audit.yml
index d070fff..34e830d 100644
--- a/.github/workflows/nightly-cargo-audit.yml
+++ b/.github/workflows/nightly-cargo-audit.yml
@@ -10,7 +10,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v7
-      - uses: taiki-e/install-action@v2.85.6
+      - uses: taiki-e/install-action@v2.85.10
         with:
           tool: cargo-audit
       - run: cargo audit
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index ef78b77..a526030 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -140,7 +140,7 @@ jobs:
 
       # This action lives outside the privileged job on purpose. It fetches
       # prebuilt binaries, so it never runs where an OIDC token is reachable.
-      - uses: taiki-e/install-action@67729d5c413db75907f0ad1e39bb04b9c868ff60 # v2
+      - uses: taiki-e/install-action@6c6fd71fe4fb72c3697d269963d0e15df8adedad # v2
         with:
           tool: cargo-hack,cargo-nextest,cargo-audit,cargo-semver-checks