diff --git a/.github/workflows/bench-gate.yml b/.github/workflows/bench-gate.yml
index e1a5b9a78..e40bbf5ae 100644
--- a/.github/workflows/bench-gate.yml
+++ b/.github/workflows/bench-gate.yml
@@ -87,7 +87,7 @@ jobs:
 
       - name: Upload run artifact
         if: always()
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7
         with:
           name: bench-run-${{ github.sha }}
           path: |
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index ae9bf3851..2d887b178 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -435,7 +435,7 @@ jobs:
 
       - name: Upload benchmark artifacts
         if: always()
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: benchmark-results-${{ github.sha }}
           path: |
@@ -627,7 +627,7 @@ jobs:
 
       - name: Upload resolved-runtime record
         if: always()
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: resolved-node-rollback-${{ matrix.legacy_path }}-${{ github.sha }}
           path: node-resolved-*.txt
@@ -1050,7 +1050,7 @@ jobs:
       # reproducible after the fact, so its upload fails closed (error).
       - name: Upload compat benchmark artifact
         if: always()
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: compat-node-${{ matrix.node-version }}-${{ github.sha }}
           path: tests/perf/ci-compat-*.json
@@ -1059,7 +1059,7 @@ jobs:
 
       - name: Upload resolved-runtime artifact
         if: always()
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: compat-node-${{ matrix.node-version }}-resolved-${{ github.sha }}
           path: node-resolved-*.txt
diff --git a/.github/workflows/go-sdk.yml b/.github/workflows/go-sdk.yml
index 1c5de1b85..6260d6354 100644
--- a/.github/workflows/go-sdk.yml
+++ b/.github/workflows/go-sdk.yml
@@ -111,7 +111,7 @@ jobs:
           test "${count}" -eq "$(find . -name go.mod | wc -l)"
 
       - name: Upload coverage
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7
         with:
           name: coverage
           path: sdks/go/coverage.out