diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 414d6f2..d125236 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -554,7 +554,7 @@ jobs:
         with:
           ref: ${{ needs.preflight.outputs.commit_sha }}
           persist-credentials: false
-      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+      - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
         with:
           path: dist
           pattern: agentshim-*
@@ -793,7 +793,7 @@ jobs:
         with:
           node-version: 22.21.1
           registry-url: 'https://registry.npmjs.org'
-      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+      - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
         with:
           path: npm-dist
           pattern: npm-platform-*