diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 31c51bd..2213cbc 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -52,7 +52,7 @@ jobs:
         with:
           components: clippy
       - uses: Swatinem/rust-cache@v2
-      - uses: taiki-e/install-action@v2.85.10
+      - uses: taiki-e/install-action@v2.86.1
         with:
           tool: cargo-hack
       - name: Clippy powerset
@@ -78,7 +78,7 @@ jobs:
       - uses: actions/checkout@v7
       - uses: dtolnay/rust-toolchain@1.95.0
       - uses: Swatinem/rust-cache@v2
-      - uses: taiki-e/install-action@v2.85.10
+      - uses: taiki-e/install-action@v2.86.1
         with:
           tool: cargo-hack,cargo-nextest
       - name: Test powerset
diff --git a/.github/workflows/nightly-cargo-audit.yml b/.github/workflows/nightly-cargo-audit.yml
index 34e830d..56f86b3 100644
--- a/.github/workflows/nightly-cargo-audit.yml
+++ b/.github/workflows/nightly-cargo-audit.yml
@@ -10,7 +10,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v7
-      - uses: taiki-e/install-action@v2.85.10
+      - uses: taiki-e/install-action@v2.86.1
         with:
           tool: cargo-audit
       - run: cargo audit
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index a526030..6775959 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -140,7 +140,7 @@ jobs:
 
       # This action lives outside the privileged job on purpose. It fetches
       # prebuilt binaries, so it never runs where an OIDC token is reachable.
-      - uses: taiki-e/install-action@6c6fd71fe4fb72c3697d269963d0e15df8adedad # v2
+      - uses: taiki-e/install-action@288e746965032cfcc232e09af2daf5f23c14d780 # v2
         with:
           tool: cargo-hack,cargo-nextest,cargo-audit,cargo-semver-checks