diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index b9b5f85..881e380 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -145,7 +145,7 @@ jobs:
         sparse-checkout: installed-test
         persist-credentials: false
 
-    - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+    - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
       with:
         name: ${{ matrix.package }}-pkg
 
@@ -179,7 +179,7 @@ jobs:
       image: ghcr.io/archlinux/archlinux:base-devel-20261025.0.616359@sha256:846dcf08b36edc8e4247e6abd622936f20dd620aae1f7fdfdc146a6b4e86e628
 
     steps:
-      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+      - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
         with:
           path: repo
           pattern: '*-pkg'
@@ -191,7 +191,7 @@ jobs:
       - run: repo-add ddterm.db.tar.zst ./*.pkg.tar.*
         working-directory: repo
 
-      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+      - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
         with:
           path: repo
           pattern: '*-test'