diff --git a/.github/workflows/test-artifact-cleanup.yml b/.github/workflows/test-artifact-cleanup.yml
index 602d039d..a0891c5a 100644
--- a/.github/workflows/test-artifact-cleanup.yml
+++ b/.github/workflows/test-artifact-cleanup.yml
@@ -21,7 +21,7 @@ jobs:
         shell: bash
         run: echo "Dumbo" > file.txt
       - name: Upload dummy file
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: telemetry-tools-attrs-1234
           path: file.txt
diff --git a/build-devcontainer/action.yml b/build-devcontainer/action.yml
index f54f57e0..127b209a 100644
--- a/build-devcontainer/action.yml
+++ b/build-devcontainer/action.yml
@@ -30,7 +30,7 @@ runs:
   using: composite
   steps:
     - name: Setup Node.js
-      uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+      uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
       with:
         node-version: '24'
 
diff --git a/telemetry-impls/load-then-clone/action.yml b/telemetry-impls/load-then-clone/action.yml
index 5519a7d4..b131d7cf 100644
--- a/telemetry-impls/load-then-clone/action.yml
+++ b/telemetry-impls/load-then-clone/action.yml
@@ -30,7 +30,7 @@ runs:
           | grep -q . && echo 'true' || echo 'false');
         echo "artifact_found=${artifact_found}" | tee -a $GITHUB_OUTPUT;
     - name: Download base environment variables file
-      uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+      uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
       if: steps.check-artifact-exists.outputs.artifact_found == 'true'
       with:
         name: telemetry-tools-env-vars
diff --git a/telemetry-impls/stash-base-env-vars/action.yml b/telemetry-impls/stash-base-env-vars/action.yml
index c6c5b153..844c6bd9 100644
--- a/telemetry-impls/stash-base-env-vars/action.yml
+++ b/telemetry-impls/stash-base-env-vars/action.yml
@@ -31,7 +31,7 @@ runs:
         SHARED_ACTIONS_REF=${SHARED_ACTIONS_REF:-main}
         EOF
     - name: Upload env vars file
-      uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+      uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
       with:
         name: telemetry-tools-env-vars
         path: telemetry-env-vars
diff --git a/telemetry-impls/stash-job-artifacts/action.yml b/telemetry-impls/stash-job-artifacts/action.yml
index ced9d6e3..2ce36907 100644
--- a/telemetry-impls/stash-job-artifacts/action.yml
+++ b/telemetry-impls/stash-job-artifacts/action.yml
@@ -16,7 +16,7 @@ runs:
         printf "%s\n" "${values[@]}" > telemetry-artifacts/attrs;
 
     - name: Upload attr file and any other files
-      uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+      uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
       with:
         name: telemetry-tools-artifacts-${{ env.JOB_ID }}
         path: telemetry-artifacts
diff --git a/telemetry-impls/summarize/action.yml b/telemetry-impls/summarize/action.yml
index 409f7f69..e016fa57 100644
--- a/telemetry-impls/summarize/action.yml
+++ b/telemetry-impls/summarize/action.yml
@@ -20,13 +20,13 @@ runs:
       with:
         all_jobs: true
     - name: Upload job JSON file if debugging
-      uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+      uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
       if: runner.debug == '1'
       with:
         name: telemetry-tools-all_jobs.json
         path: all_jobs.json
     # This downloads ALL of the files that we have collected from each job.
-    - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+    - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
       with:
         path: telemetry-artifacts
         pattern: telemetry-tools-*