diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 2245708e..f7de5144 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -82,7 +82,7 @@ jobs:
             libxcb-render0-dev libxcb-shape0-dev libxcb-xfixes0-dev \
             libfontconfig1-dev libfreetype6-dev
 
-      - uses: taiki-e/install-action@ab6895351a88b908e96a4697860d4ffea5e57dbe # v2
+      - uses: taiki-e/install-action@8cca0918f8471c33515202b73f56ab27f2bed283 # v2
         with:
           tool: protoc
 
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 9e318e7e..691c1433 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -60,7 +60,7 @@ jobs:
             libxkbcommon-x11-dev libwayland-dev libxcb1-dev \
             libxcb-render0-dev libxcb-shape0-dev libxcb-xfixes0-dev \
             libfontconfig1-dev libfreetype6-dev
-      - uses: taiki-e/install-action@ab6895351a88b908e96a4697860d4ffea5e57dbe # v2
+      - uses: taiki-e/install-action@8cca0918f8471c33515202b73f56ab27f2bed283 # v2
         with:
           tool: protoc,cargo-nextest@0.9.143,cargo-machete@0.9.2
       - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2
@@ -220,7 +220,7 @@ jobs:
         with:
           persist-credentials: false
       - uses: dtolnay/rust-toolchain@4360b52568e2003a75bf9bc1d59f33a8e3fc893c # stable
-      - uses: taiki-e/install-action@ab6895351a88b908e96a4697860d4ffea5e57dbe # v2
+      - uses: taiki-e/install-action@8cca0918f8471c33515202b73f56ab27f2bed283 # v2
         with:
           tool: protoc
       - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2
@@ -274,7 +274,7 @@ jobs:
       # The runner has to match the `wasm-bindgen` crate this workspace
       # resolves, exactly — the generated glue and the runner are two halves
       # of one version — so it is pinned here and moves when Cargo.lock does.
-      - uses: taiki-e/install-action@ab6895351a88b908e96a4697860d4ffea5e57dbe # v2
+      - uses: taiki-e/install-action@8cca0918f8471c33515202b73f56ab27f2bed283 # v2
         with:
           tool: protoc,wasm-bindgen-cli@0.2.127
       - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2
@@ -380,7 +380,7 @@ jobs:
       - uses: dtolnay/rust-toolchain@6c977a6ca4077a0ceb28ffbe03f59d46e9ac8772 # master
         with:
           toolchain: "1.95"
-      - uses: taiki-e/install-action@ab6895351a88b908e96a4697860d4ffea5e57dbe # v2
+      - uses: taiki-e/install-action@8cca0918f8471c33515202b73f56ab27f2bed283 # v2
         with:
           tool: protoc
       - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2
diff --git a/.github/workflows/pages.yml b/.github/workflows/pages.yml
index 2ad8f2ce..7a2d2b8f 100644
--- a/.github/workflows/pages.yml
+++ b/.github/workflows/pages.yml
@@ -102,7 +102,7 @@ jobs:
       # The build script that embeds gpui-component's icons runs on the host,
       # and `waproto` generates code with protoc — both are host builds even
       # though the artifact is wasm.
-      - uses: taiki-e/install-action@ab6895351a88b908e96a4697860d4ffea5e57dbe # v2
+      - uses: taiki-e/install-action@8cca0918f8471c33515202b73f56ab27f2bed283 # v2
         with:
           tool: protoc,trunk
 
diff --git a/.github/workflows/web-bundle.yml b/.github/workflows/web-bundle.yml
index 5131d427..2a64a0f6 100644
--- a/.github/workflows/web-bundle.yml
+++ b/.github/workflows/web-bundle.yml
@@ -62,7 +62,7 @@ jobs:
       # Host builds even though the artifact is wasm: the build script that
       # embeds gpui-component's icons runs on the host, and `waproto`
       # generates code with protoc.
-      - uses: taiki-e/install-action@ab6895351a88b908e96a4697860d4ffea5e57dbe # v2
+      - uses: taiki-e/install-action@8cca0918f8471c33515202b73f56ab27f2bed283 # v2
         with:
           tool: protoc,trunk