diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 178ef47..ee93ee8 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -40,7 +40,7 @@ jobs:
       - name: Install Nix
         # flakes + nix-command are enabled by default in install-nix-action v31,
         # so no extra_nix_config is needed.
-        uses: cachix/install-nix-action@13d8dd58da0234aa297dedd986986ccb8e7f3e24  # v31.11.1
+        uses: cachix/install-nix-action@448cde739abec1eaf0646249e3d25bb8d9bc7702  # v31.11.2
 
       - name: Cache Nix store
         uses: nix-community/cache-nix-action@7df957e333c1e5da7721f60227dbba6d06080569  # v7.0.2
@@ -83,7 +83,7 @@ jobs:
       - name: Install Nix
         # flakes + nix-command are enabled by default in install-nix-action v31,
         # so no extra_nix_config is needed.
-        uses: cachix/install-nix-action@13d8dd58da0234aa297dedd986986ccb8e7f3e24  # v31.11.1
+        uses: cachix/install-nix-action@448cde739abec1eaf0646249e3d25bb8d9bc7702  # v31.11.2
 
       - name: Cache Nix store
         uses: nix-community/cache-nix-action@7df957e333c1e5da7721f60227dbba6d06080569  # v7.0.2
@@ -123,7 +123,7 @@ jobs:
       - name: Install Nix
         # flakes + nix-command are enabled by default in install-nix-action v31,
         # so no extra_nix_config is needed.
-        uses: cachix/install-nix-action@13d8dd58da0234aa297dedd986986ccb8e7f3e24  # v31.11.1
+        uses: cachix/install-nix-action@448cde739abec1eaf0646249e3d25bb8d9bc7702  # v31.11.2
 
       - name: Cache Nix store
         uses: nix-community/cache-nix-action@7df957e333c1e5da7721f60227dbba6d06080569  # v7.0.2
diff --git a/.github/workflows/environment-diff.yml b/.github/workflows/environment-diff.yml
index bb5e437..907945b 100644
--- a/.github/workflows/environment-diff.yml
+++ b/.github/workflows/environment-diff.yml
@@ -39,7 +39,7 @@ jobs:
       - name: Install Nix
         # flakes + nix-command are enabled by default in install-nix-action v31,
         # so no extra_nix_config is needed.
-        uses: cachix/install-nix-action@13d8dd58da0234aa297dedd986986ccb8e7f3e24  # v31.11.1
+        uses: cachix/install-nix-action@448cde739abec1eaf0646249e3d25bb8d9bc7702  # v31.11.2
 
       - name: Build both environments and diff their closures
         run: |