diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index c03684d8..3ea323e7 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -152,7 +152,7 @@ jobs:
 
       - name: 📤 Preserve the reviewed release patch
         if: steps.state.outputs.mode == 'prepare'
-        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
         with:
           name: release-preparation-${{ github.run_attempt }}
           path: ${{ runner.temp }}/release-preparation/release.patch
@@ -171,7 +171,7 @@ jobs:
           steps.state.outputs.mode == 'publish' &&
           github.event_name == 'workflow_dispatch' &&
           inputs.expected_sha != ''
-        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
         with:
           name: release-artifacts-${{ github.run_attempt }}
           path: ${{ runner.temp }}/release-artifacts
@@ -200,7 +200,7 @@ jobs:
           ref: ${{ needs.release.outputs.base_sha }}
 
       - name: 📥 Download the release patch
-        uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
         with:
           name: release-preparation-${{ github.run_attempt }}
           path: ${{ runner.temp }}/release-preparation
@@ -505,7 +505,7 @@ jobs:
           registry-url: https://registry.npmjs.org
 
       - name: 📥 Download the exact tarballs
-        uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
         with:
           name: release-artifacts-${{ github.run_attempt }}
           path: ${{ runner.temp }}/release-artifacts