diff --git a/.github/workflows/build-release-task.yml b/.github/workflows/build-release-task.yml
index 1ba8b8d..fbd14d2 100644
--- a/.github/workflows/build-release-task.yml
+++ b/.github/workflows/build-release-task.yml
@@ -99,7 +99,7 @@ jobs:
       # Collect any release-asset-<branch>-* artifacts. The Docker target pushes directly and uploads none, so this
       # matches nothing (which succeeds) and the release carries just the tag + LICENSE/README.
       - name: Download release asset artifacts step
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
         with:
           pattern: release-asset-${{ inputs.branch }}-*
           merge-multiple: true