diff --git a/.github/workflows/actions/setup-php/action.yml b/.github/workflows/actions/setup-php/action.yml
index 03f6824..2282ed7 100644
--- a/.github/workflows/actions/setup-php/action.yml
+++ b/.github/workflows/actions/setup-php/action.yml
@@ -10,7 +10,7 @@ runs:
   using: "composite"
   steps:
     - name: ⚙️ Setup PHP, with composer and extensions
-      uses: shivammathur/setup-php@cf4cade2721270509d5b1c766ab3549210a39a2a # 2.33.0
+      uses: shivammathur/setup-php@44454db4f0199b8b9685a5d763dc37cbf79108e1 # 2.36.0
       with:
         php-version: ${{ inputs.php-version }}
         extensions: none,iconv,dom,curl,mbstring,tokenizer,xml,xmlwriter,simplexml,ctype
@@ -22,7 +22,7 @@ runs:
       run: echo "dir=$(composer config cache-files-dir)" >> "$GITHUB_OUTPUT"
 
     - name: ♻️ Cache composer dependencies
-      uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
+      uses: actions/cache@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1
       with:
         path: ${{ steps.composer-cache.outputs.dir }}
         key: ${{ runner.os }}-composer-${{ inputs.php-versions }}-${{ hashFiles('**/composer.json') }}