diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 8b74da25..299896de 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -81,7 +81,7 @@ jobs:
       # report findings rather than generate bytes, so they ride the pinned
       # action's own tool manifest, moving when Dependabot bumps the pin.
       - name: Install just, cargo-nextest, cargo-rdme, cargo-fuzz, cargo-mutants, and wasm-pack
-        uses: taiki-e/install-action@288e746965032cfcc232e09af2daf5f23c14d780 # v2.86.1
+        uses: taiki-e/install-action@ba47c86ac325773530516bb756137ac718732518 # v2.86.5
         with:
           tool: just,cargo-nextest,cargo-rdme@2.1.0,cargo-fuzz,cargo-mutants,wasm-pack
 
@@ -153,7 +153,7 @@ jobs:
           components: clippy, rustfmt
 
       - name: Install just, cargo-nextest, cargo-audit, and cargo-deny
-        uses: taiki-e/install-action@288e746965032cfcc232e09af2daf5f23c14d780 # v2.86.1
+        uses: taiki-e/install-action@ba47c86ac325773530516bb756137ac718732518 # v2.86.5
         with:
           tool: just,cargo-nextest,cargo-audit,cargo-deny
 
@@ -216,7 +216,7 @@ jobs:
           components: llvm-tools
 
       - name: Install just, cargo-nextest, and cargo-llvm-cov
-        uses: taiki-e/install-action@288e746965032cfcc232e09af2daf5f23c14d780 # v2.86.1
+        uses: taiki-e/install-action@ba47c86ac325773530516bb756137ac718732518 # v2.86.5
         with:
           tool: just,cargo-nextest,cargo-llvm-cov
 
diff --git a/.github/workflows/pages.yml b/.github/workflows/pages.yml
index 5bc3155c..efa0a552 100644
--- a/.github/workflows/pages.yml
+++ b/.github/workflows/pages.yml
@@ -45,7 +45,7 @@ jobs:
       # The same SHA-pinned install path ci.yml uses, so both workflows
       # share one provenance story for wasm-pack.
       - name: Install wasm-pack
-        uses: taiki-e/install-action@288e746965032cfcc232e09af2daf5f23c14d780 # v2.86.1
+        uses: taiki-e/install-action@ba47c86ac325773530516bb756137ac718732518 # v2.86.5
         with:
           tool: wasm-pack