diff --git a/.github/workflows/check.yml b/.github/workflows/check.yml
index 14a3b8c..fd90b7a 100644
--- a/.github/workflows/check.yml
+++ b/.github/workflows/check.yml
@@ -125,7 +125,7 @@ jobs:
         with:
           toolchain: stable
       - name: cargo install cargo-hack
-        uses: taiki-e/install-action@b20dedce73af6905cdc30d6611090c9b67557c8d # tag=v2.85.12
+        uses: taiki-e/install-action@5b4d68e2e660441203ab128a23676f1e4faf1532 # tag=v2.86.3
         with:
           tool: cargo-hack
       # intentionally no target specifier; see https://github.com/jonhoo/rust-ci-conf/pull/4
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index d256324..39bbaf8 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -154,7 +154,7 @@ jobs:
           toolchain: stable
           components: llvm-tools-preview
       - name: cargo install cargo-llvm-cov
-        uses: taiki-e/install-action@b20dedce73af6905cdc30d6611090c9b67557c8d # tag=v2.85.12
+        uses: taiki-e/install-action@5b4d68e2e660441203ab128a23676f1e4faf1532 # tag=v2.86.3
         with:
           tool: cargo-llvm-cov
       - name: cargo generate-lockfile