diff --git a/.github/workflows/hot-sync-production.yml b/.github/workflows/hot-sync-production.yml
index e52ca90..6861712 100644
--- a/.github/workflows/hot-sync-production.yml
+++ b/.github/workflows/hot-sync-production.yml
@@ -70,7 +70,7 @@ jobs:
       - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1
         with: {node-version: 22, cache: npm}
       - run: npm ci && npm run build
-      - uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131
+      - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333
         with: {name: synthetic-linux-state, path: fixture-state}
       - name: Reconnect stale offline state after the other machine reset
         env:
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 8a3349f..1173093 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -53,7 +53,7 @@ jobs:
       id-token: write
       attestations: write
     steps:
-      - uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
+      - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
         with:
           name: crosshead-release-${{ github.sha }}
           path: release/