diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index d66c6d2fe..dedc65322 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -438,7 +438,7 @@ jobs:
 
       - name: Upload signed app artifact
         if: ${{ runner.os == 'macOS' && inputs.phase == 'submit' }}
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9
         with:
           name: pawwork-signed-app-${{ inputs.channel || 'dev' }}-${{ matrix.arch_label }}-${{ github.run_id }}-${{ github.run_attempt }}
           path: |
@@ -843,7 +843,7 @@ jobs:
 
       - name: Upload packaged app artifact
         if: ${{ runner.os == 'Windows' && inputs.phase != 'finalize' }}
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9
         with:
           name: pawwork-${{ runner.os }}-${{ matrix.arch_label }}
           if-no-files-found: error
@@ -897,7 +897,7 @@ jobs:
           RELEASE_ARCH: ${{ matrix.arch_label }}
           MIRROR_REF: main
 
-      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
+      - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9
         if: ${{ runner.os == 'macOS' && (inputs.phase == 'finalize' || inputs.phase == 'full') && inputs.arch == matrix.arch_label }}
         with:
           name: pawwork-${{ runner.os }}-${{ matrix.arch_label }}
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 68f3f8f8c..50f73544b 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -112,7 +112,7 @@ jobs:
 
       - name: Upload Windows smoke screenshot
         if: ${{ always() && matrix.platform == 'win32' }}
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9
         with:
           name: pawwork-windows-smoke-${{ github.run_id }}-${{ github.run_attempt }}
           path: ${{ runner.temp }}/pawwork-windows-smoke.png