diff --git a/.github/workflows/links.yml b/.github/workflows/links.yml
index 9ce1c75e..4312bcd6 100644
--- a/.github/workflows/links.yml
+++ b/.github/workflows/links.yml
@@ -22,7 +22,7 @@ jobs:
               run: echo "TIMESTAMP=$(date +%s)" >> "$GITHUB_ENV"
 
             - name: Restore lychee cache
-              uses: actions/cache@6849a6489940f00c2f30c0fb92c6274307ccb58a # v4
+              uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4
               with:
                   path: .lycheecache
                   key: cache-lychee-${{ env.TIMESTAMP }}
diff --git a/.tool-versions b/.tool-versions
index 55fb3065..fcf9b7e1 100644
--- a/.tool-versions
+++ b/.tool-versions
@@ -13,10 +13,10 @@
 # check it with
 # diff <(sed '/^#/d; /^$/d' .tool-versions | sort) <(sed '/^#/d; /^$/d' .tool-versions) && echo ".tool-versions is sorted correctly" || echo ".tool-versions is not sorted correctly"
 
-awscli 2.22.7
+awscli 2.22.12
 
 just 1.37.0
 
 pre-commit 4.0.1
 
-python 3.13.0
+python 3.13.1