diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index dbd9737..22ce09d 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -30,7 +30,7 @@ jobs:
       - run: npm run benchmark:precision
       - run: node dist/cli.js demo --output reports/demo.html --json reports/demo.json --sarif reports/demo.sarif --no-fail --quiet
       - run: npm run test:package
-      - uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
+      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         if: matrix.node == 24
         with:
           name: depdiff-demo-report
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 67dd3d0..2d2fb3f 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -37,7 +37,7 @@ jobs:
       - name: Smoke-test the exact release artifact
         run: node scripts/package-smoke.mjs "${{ steps.pack.outputs.tarball }}"
       - name: Preserve the exact release artifact
-        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: ${{ steps.pack.outputs.artifact_name }}
           path: release-artifacts/*