diff --git a/.github/workflows/build-ruby.yml b/.github/workflows/build-ruby.yml
index d16aab2..2078c7a 100644
--- a/.github/workflows/build-ruby.yml
+++ b/.github/workflows/build-ruby.yml
@@ -181,10 +181,11 @@ jobs:
       - uses: actions/checkout@v6
 
       - name: Setup BoringCache CLI
-        uses: boringcache/one@v1
+        uses: boringcache/one@e6adf88e3d4847192ed4cd0a8b7e746c5eb3cc30 # v1.43.3
         with:
-          setup: none
-          cli-platform: ${{ (matrix.use_docker == true && format('{0}-{1}', matrix.platform, matrix.arch)) || '' }}
+          cli-version: v1.43.3
+          mode: gha
+          cli-platform: ${{ (matrix.use_docker == true && format('linux-musl-{0}', matrix.arch)) || '' }}
 
       - name: Copy CLI to workspace for Docker
         if: matrix.use_docker == true
@@ -462,9 +463,10 @@ jobs:
     if: always()
     steps:
       - name: Setup BoringCache CLI
-        uses: boringcache/one@v1
+        uses: boringcache/one@e6adf88e3d4847192ed4cd0a8b7e746c5eb3cc30 # v1.43.3
         with:
-          setup: none
+          cli-version: v1.43.3
+          mode: gha
 
       - name: Clean up old cache entries
         run: |
diff --git a/.github/workflows/validate-ruby.yml b/.github/workflows/validate-ruby.yml
index b93b177..cc85c05 100644
--- a/.github/workflows/validate-ruby.yml
+++ b/.github/workflows/validate-ruby.yml
@@ -65,4 +65,6 @@ jobs:
           set -euo pipefail
 
           python3 scripts/update-ruby-versions.py
-          git diff --exit-code -- versions.yml
+          cp versions.yml "${RUNNER_TEMP}/ruby-versions-after-update.yml"
+          python3 scripts/update-ruby-versions.py
+          cmp "${RUNNER_TEMP}/ruby-versions-after-update.yml" versions.yml