diff --git a/.github/workflows/benchmarks.yml b/.github/workflows/benchmarks.yml
index 12c51ad..2147359 100644
--- a/.github/workflows/benchmarks.yml
+++ b/.github/workflows/benchmarks.yml
@@ -199,7 +199,7 @@ jobs:
           fi
 
       - name: Upload benchmark artifacts
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         if: always()
         with:
           name: benchmark-results-${{ github.sha }}
diff --git a/.github/workflows/fuzz.yml b/.github/workflows/fuzz.yml
index 294d0d4..15cbbd1 100644
--- a/.github/workflows/fuzz.yml
+++ b/.github/workflows/fuzz.yml
@@ -124,7 +124,7 @@ jobs:
 
       - name: Upload crash artifacts
         if: steps.check_crashes.outputs.crashes_found == 'true'
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: fuzz-crashes-${{ matrix.target }}-${{ github.sha }}
           path: fuzz/artifacts/${{ matrix.target }}/
@@ -236,7 +236,7 @@ jobs:
           done
 
       - name: Upload coverage artifacts
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: fuzz-coverage-${{ github.sha }}
           path: fuzz/coverage/
diff --git a/deny.toml b/deny.toml
index bfe2092..c258004 100644
--- a/deny.toml
+++ b/deny.toml
@@ -36,6 +36,7 @@ ignore = []
 multiple-versions = "deny"
 wildcards = "deny"
 highlight = "all"
+allow-wildcard-paths = true
 workspace-default-features = "allow"
 external-default-features = "allow"
 allow = []