diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 9162fd0..2e85c69 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -59,7 +59,7 @@ jobs:
         run: cd dist && sha256sum -c *.zip.sha256
 
       - name: Upload distribution artifact
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: engineering-quality-dist
           path: dist/
@@ -70,7 +70,7 @@ jobs:
         run: rm -rf dist
 
       - name: Download distribution artifact
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
         with:
           name: engineering-quality-dist
           path: dist
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 543f6c9..a6da0ea 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -81,7 +81,7 @@ jobs:
         run: python scripts/release_notes.py --output dist/RELEASE_NOTES.md
 
       - name: Stage release payload
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: release-payload
           path: dist/
@@ -119,7 +119,7 @@ jobs:
           fi
 
       - name: Download release payload
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
         with:
           name: release-payload
           path: dist