diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index cb59e7f..74d803f 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -136,7 +136,7 @@ jobs:
           fi
           echo "sha256=$(sha256sum "${tarballs[0]}" | awk '{ print $1 }')" >> "$GITHUB_OUTPUT"
       - name: Upload the packed artifact
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: ci-npm-package
           path: ci-artifacts/*.tgz
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 90dd051..38c6373 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -655,7 +655,7 @@ jobs:
           set -euo pipefail
           echo "name=npm-package-${{ steps.version.outputs.version }}-${{ github.run_id }}-${{ github.run_attempt }}" >> "$GITHUB_OUTPUT"
       - name: Upload the verified release artifact
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: ${{ steps.artifact-name.outputs.name }}
           path: ${{ steps.pack.outputs.tarball }}
diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml
index 997fbf0..5010dc1 100644
--- a/.github/workflows/release-please.yml
+++ b/.github/workflows/release-please.yml
@@ -1205,7 +1205,7 @@ jobs:
           EOF
       - name: Upload the exact Release Please result
         if: steps.preflight.outputs.mode == 'release'
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: release-please-result-${{ github.run_id }}-${{ github.run_attempt }}
           path: release-please-result/result.json