diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 9bc90c57430..c1ef602029b 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -48,7 +48,7 @@ jobs:
     runs-on: ${{ matrix.os }}
     steps:
     - uses: actions/checkout@v4
-    - uses: cachix/install-nix-action@v24
+    - uses: cachix/install-nix-action@v25
     - uses: cachix/cachix-action@v13
       if: startsWith(github.ref, 'refs/heads/')
       with:
@@ -74,7 +74,7 @@ jobs:
     needs: [ changelog, build ]
     steps:
     - uses: actions/checkout@v4
-    - uses: cachix/install-nix-action@v24
+    - uses: cachix/install-nix-action@v25
     - uses: cachix/cachix-action@v13
       with:
         name: ic-hs-test
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 64464f6072a..96584585572 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -17,7 +17,7 @@ jobs:
         fetch-depth: 0
         # fetch PR commit, not predicted merge commit
         ref: ${{ github.event.pull_request.head.sha }}
-    - uses: cachix/install-nix-action@v24
+    - uses: cachix/install-nix-action@v25
 
     # We are using the ic-hs-test cachix cache that is also used by
     # dfinity/ic-hs. This is partly laziness (on need to set up a separate
@@ -106,7 +106,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v4
-    - uses: cachix/install-nix-action@v24
+    - uses: cachix/install-nix-action@v25
     - uses: cachix/cachix-action@v13
       with:
         name: ic-hs-test
@@ -129,7 +129,7 @@ jobs:
     runs-on: ${{ matrix.os }}
     steps:
     - uses: actions/checkout@v4
-    - uses: cachix/install-nix-action@v24
+    - uses: cachix/install-nix-action@v25
     - uses: cachix/cachix-action@v13
       with:
         name: ic-hs-test
diff --git a/.github/workflows/update-hash.yml b/.github/workflows/update-hash.yml
index d0cb5ad8b89..b3e1e72138b 100644
--- a/.github/workflows/update-hash.yml
+++ b/.github/workflows/update-hash.yml
@@ -16,7 +16,7 @@ jobs:
       with:
         # This is needed to be able to push and trigger CI with that push
         token: ${{ secrets.NIV_UPDATER_TOKEN }}
-    - uses: cachix/install-nix-action@v24
+    - uses: cachix/install-nix-action@v25
       with:
         nix_path: nixpkgs=channel:nixos-22.11
     - uses: cachix/cachix-action@v13