diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index adf00eb93a3..9bc90c57430 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -49,12 +49,12 @@ jobs:
     steps:
     - uses: actions/checkout@v4
     - uses: cachix/install-nix-action@v24
-    - uses: cachix/cachix-action@v12
+    - uses: cachix/cachix-action@v13
       if: startsWith(github.ref, 'refs/heads/')
       with:
         name: ic-hs-test
         # NB: No auth token, we don’t want to push new stuff here
-    - uses: cachix/cachix-action@v12
+    - uses: cachix/cachix-action@v13
       if: startsWith(github.ref, 'refs/tags/')
       with:
         name: ic-hs-test
@@ -75,7 +75,7 @@ jobs:
     steps:
     - uses: actions/checkout@v4
     - uses: cachix/install-nix-action@v24
-    - uses: cachix/cachix-action@v12
+    - uses: cachix/cachix-action@v13
       with:
         name: ic-hs-test
         # NB: No auth token, we don’t expect to push new stuff here
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index a4bce4267e9..226cf1bdafb 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -22,7 +22,7 @@ jobs:
     # We are using the ic-hs-test cachix cache that is also used by
     # dfinity/ic-hs. This is partly laziness (on need to set up a separate
     # cache), but also to get the ic-ref-test binary without rebuilding
-    - uses: cachix/cachix-action@v12
+    - uses: cachix/cachix-action@v13
       with:
         name: ic-hs-test
         authToken: '${{ secrets.CACHIX_AUTH_TOKEN }}'
@@ -107,7 +107,7 @@ jobs:
     steps:
     - uses: actions/checkout@v4
     - uses: cachix/install-nix-action@v24
-    - uses: cachix/cachix-action@v12
+    - uses: cachix/cachix-action@v13
       with:
         name: ic-hs-test
     - name: Fetch report
@@ -130,7 +130,7 @@ jobs:
     steps:
     - uses: actions/checkout@v4
     - uses: cachix/install-nix-action@v24
-    - uses: cachix/cachix-action@v12
+    - uses: cachix/cachix-action@v13
       with:
         name: ic-hs-test
     - name: nix-build
diff --git a/.github/workflows/update-hash.yml b/.github/workflows/update-hash.yml
index 889de9cd6c2..355ce6dd47d 100644
--- a/.github/workflows/update-hash.yml
+++ b/.github/workflows/update-hash.yml
@@ -19,7 +19,7 @@ jobs:
     - uses: cachix/install-nix-action@v24
       with:
         nix_path: nixpkgs=channel:nixos-22.11
-    - uses: cachix/cachix-action@v12
+    - uses: cachix/cachix-action@v13
       with:
         name: ic-hs-test
         authToken: '${{ secrets.CACHIX_AUTH_TOKEN }}'