diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 2872ded34..ef355121f 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -1004,7 +1004,7 @@ jobs:
           toolchain: nightly
           apt: "false"
           cache-key: fuzz
-      - uses: taiki-e/install-action@v2.87.21
+      - uses: taiki-e/install-action@v2.87.22
         with:
           tool: cargo-fuzz
       - name: Build and run every fuzz target
@@ -1068,7 +1068,7 @@ jobs:
         with:
           components: llvm-tools-preview
           cache-key: coverage
-      - uses: taiki-e/install-action@v2.87.21
+      - uses: taiki-e/install-action@v2.87.22
         with:
           tool: cargo-llvm-cov
       - run: cargo llvm-cov --workspace --lib --summary-only --fail-under-lines 70
diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
index 495dd9a8e..f8407ae95 100644
--- a/.github/workflows/security.yml
+++ b/.github/workflows/security.yml
@@ -76,7 +76,7 @@ jobs:
       # Reason 2 was an ACTIVE constraint until the v1.3.0 pin bump (1.86 vs
       # cargo-audit's 1.88); it is slack today and can bind again after an MSRV
       # change in either direction, so it is kept rather than deleted as history.
-      - uses: taiki-e/install-action@v2.87.21
+      - uses: taiki-e/install-action@v2.87.22
         with:
           tool: cargo-audit
       - run: cargo audit
@@ -92,7 +92,7 @@ jobs:
       # Prebuilt binary for the same two reasons as the audit job above: it is
       # much faster than compiling cargo-deny, and it keeps the security gate
       # independent of this repo's rustc pin. Policy lives in `deny.toml`.
-      - uses: taiki-e/install-action@v2.87.21
+      - uses: taiki-e/install-action@v2.87.22
         with:
           tool: cargo-deny
       - run: cargo deny check