diff --git a/.github/workflows/bump-version-rust.yml b/.github/workflows/bump-version-rust.yml
index 6776542..e20fb2c 100644
--- a/.github/workflows/bump-version-rust.yml
+++ b/.github/workflows/bump-version-rust.yml
@@ -71,7 +71,7 @@ jobs:
           toolchain: stable
 
       - name: Cache dependencies
-        uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5
+        uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4
         with:
           shared-key: stable-ubuntu-latest
         timeout-minutes: 5
diff --git a/.github/workflows/check-github-actions.yml b/.github/workflows/check-github-actions.yml
index 939f8ff..14188af 100644
--- a/.github/workflows/check-github-actions.yml
+++ b/.github/workflows/check-github-actions.yml
@@ -44,7 +44,7 @@ jobs:
           esac
 
       - name: Lint GitHub Actions workflow files
-        uses: zizmorcore/zizmor-action@0dce2577a4760a2749d8cfb7a84b7d5585ebcb7d # v0.5.0
+        uses: zizmorcore/zizmor-action@71321a20a9ded102f6e9ce5718a2fcec2c4f70d8 # v0.5.2
         with:
           advanced-security: false
           persona: ${{ inputs.zizmor_persona }}
diff --git a/.github/workflows/check-rust.yml b/.github/workflows/check-rust.yml
index e5b52f1..e667558 100644
--- a/.github/workflows/check-rust.yml
+++ b/.github/workflows/check-rust.yml
@@ -44,7 +44,7 @@ jobs:
           components: clippy
 
       - name: Cache dependencies
-        uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5
+        uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4
         with:
           shared-key: stable-ubuntu-latest
         timeout-minutes: 5
@@ -80,7 +80,7 @@ jobs:
           toolchain: stable
 
       - name: Cache dependencies
-        uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5
+        uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4
         with:
           shared-key: stable-${{ matrix.platform }}
         timeout-minutes: 5
@@ -134,7 +134,7 @@ jobs:
         run: rustup override set "${STEPS_MSRV_OUTPUTS_VERSION}"
 
       - name: Cache dependencies
-        uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5
+        uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4
         with:
           shared-key: msrv-ubuntu-latest
         timeout-minutes: 5
diff --git a/.github/workflows/draft-release-flutter.yml b/.github/workflows/draft-release-flutter.yml
index 8422fd1..2692f07 100644
--- a/.github/workflows/draft-release-flutter.yml
+++ b/.github/workflows/draft-release-flutter.yml
@@ -318,14 +318,14 @@ jobs:
           persist-credentials: false
 
       - name: Download staged Android artifacts
-        uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
         with:
           name: release-dist-android
           path: dist
 
       - name: Download staged iOS artifacts
         if: ${{ inputs.build_ios_ipa }}
-        uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
         with:
           name: release-dist-ios
           path: dist
diff --git a/.github/workflows/draft-release-rust.yml b/.github/workflows/draft-release-rust.yml
index e6d3ab1..6f0d5ca 100644
--- a/.github/workflows/draft-release-rust.yml
+++ b/.github/workflows/draft-release-rust.yml
@@ -92,7 +92,7 @@ jobs:
           targets: ${{ matrix.target }}
 
       - name: Cache dependencies
-        uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5
+        uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4
         with:
           shared-key: stable-ubuntu-latest
         timeout-minutes: 5
diff --git a/.github/workflows/preload-caches-rust.yml b/.github/workflows/preload-caches-rust.yml
index 47df5b4..f57389f 100644
--- a/.github/workflows/preload-caches-rust.yml
+++ b/.github/workflows/preload-caches-rust.yml
@@ -35,7 +35,7 @@ jobs:
           toolchain: stable
 
       - name: Cache dependencies
-        uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5
+        uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4
         with:
           shared-key: stable-${{ matrix.platform }}
         timeout-minutes: 5
@@ -81,7 +81,7 @@ jobs:
         run: rustup override set "${STEPS_MSRV_OUTPUTS_VERSION}"
 
       - name: Cache dependencies
-        uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5
+        uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4
         with:
           shared-key: msrv-ubuntu-latest
         timeout-minutes: 5
diff --git a/.github/workflows/publish-crate.yml b/.github/workflows/publish-crate.yml
index b5cfa87..f45be93 100644
--- a/.github/workflows/publish-crate.yml
+++ b/.github/workflows/publish-crate.yml
@@ -30,7 +30,7 @@ jobs:
           toolchain: stable
 
       - name: Cache dependencies
-        uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5
+        uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4
         with:
           shared-key: stable-ubuntu-latest
         timeout-minutes: 5
diff --git a/.github/workflows/tag-untagged-releases-rust.yml b/.github/workflows/tag-untagged-releases-rust.yml
index 17d5c32..ae3c7a9 100644
--- a/.github/workflows/tag-untagged-releases-rust.yml
+++ b/.github/workflows/tag-untagged-releases-rust.yml
@@ -47,7 +47,7 @@ jobs:
           toolchain: stable
 
       - name: Cache dependencies
-        uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5
+        uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4
         with:
           shared-key: stable-ubuntu-latest
         timeout-minutes: 5