diff --git a/.github/workflows/update-autofirma-CAs-by-provider.yml b/.github/workflows/update-autofirma-CAs-by-provider.yml
index 922788c..6e346f4 100644
--- a/.github/workflows/update-autofirma-CAs-by-provider.yml
+++ b/.github/workflows/update-autofirma-CAs-by-provider.yml
@@ -45,7 +45,7 @@ jobs:
         uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
       - name: Install Nix Package Manager
-        uses: cachix/install-nix-action@fc6e360bedc9ee72d75e701397f0bb30dce77568 # v31.5.2
+        uses: cachix/install-nix-action@a809471b5c7c913aa67bec8f459a11a0decc3fce # v31.6.2
 
       - name: Download CA for ${{ matrix.fetch_link.cif }}
         shell: bash  # https://github.com/actions/runner-images/issues/4459#issuecomment-1374859960
diff --git a/.github/workflows/update-autofirma-trusted-providers.yml b/.github/workflows/update-autofirma-trusted-providers.yml
index 91495ce..abce855 100644
--- a/.github/workflows/update-autofirma-trusted-providers.yml
+++ b/.github/workflows/update-autofirma-trusted-providers.yml
@@ -15,7 +15,7 @@ jobs:
         uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
       - name: Install Nix
-        uses: cachix/install-nix-action@fc6e360bedc9ee72d75e701397f0bb30dce77568 # v31.5.2
+        uses: cachix/install-nix-action@a809471b5c7c913aa67bec8f459a11a0decc3fce # v31.6.2
 
       - name: Download AutoFirma Trusted Providers
         run: |
diff --git a/.github/workflows/update-fixed-output-derivations-lock.yml b/.github/workflows/update-fixed-output-derivations-lock.yml
index f7ce91c..a867f7a 100644
--- a/.github/workflows/update-fixed-output-derivations-lock.yml
+++ b/.github/workflows/update-fixed-output-derivations-lock.yml
@@ -21,7 +21,7 @@ jobs:
           ref: ${{ github.ref }}
 
       - name: Install Nix
-        uses: cachix/install-nix-action@fc6e360bedc9ee72d75e701397f0bb30dce77568 # v31.5.2
+        uses: cachix/install-nix-action@a809471b5c7c913aa67bec8f459a11a0decc3fce # v31.6.2
 
       - name: Update fixed-output derivations
         run: |
diff --git a/.github/workflows/update-flake-lock.yml b/.github/workflows/update-flake-lock.yml
index be38053..a6338f6 100644
--- a/.github/workflows/update-flake-lock.yml
+++ b/.github/workflows/update-flake-lock.yml
@@ -31,7 +31,7 @@ jobs:
           ref: ${{ matrix.branch }}
 
       - name: Install Nix
-        uses: cachix/install-nix-action@fc6e360bedc9ee72d75e701397f0bb30dce77568 # v31.5.2
+        uses: cachix/install-nix-action@a809471b5c7c913aa67bec8f459a11a0decc3fce # v31.6.2
 
       - name: Update flake.lock
         uses: DeterminateSystems/update-flake-lock@c5930b397a673a70ca70be06020e943aeac310a1 # v27
@@ -76,7 +76,7 @@ jobs:
           ref: "release-${{ vars.NIXOS_OLDSTABLE_BRANCH }}"
 
       - name: Install Nix
-        uses: cachix/install-nix-action@fc6e360bedc9ee72d75e701397f0bb30dce77568 # v31.5.2
+        uses: cachix/install-nix-action@a809471b5c7c913aa67bec8f459a11a0decc3fce # v31.6.2
 
       - name: Update flake.lock
         uses: DeterminateSystems/update-flake-lock@c5930b397a673a70ca70be06020e943aeac310a1 # v27