diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 04e8438..db1e2f0 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -90,7 +90,7 @@ jobs:
       - uses: astral-sh/setup-uv@d0cc045d04ccac9d8b7881df0226f9e82c39688e # v6.8.0
       - run: uv build
       - run: uvx twine check --strict dist/*
-      - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
+      - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: dist
           path: dist/
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 318bbf1..09f9882 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -54,7 +54,7 @@ jobs:
           SETUPTOOLS_SCM_PRETEND_VERSION: ${{ needs.version.outputs.version }}
         run: uv build
       - run: uvx twine check --strict dist/*
-      - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
+      - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: dist
           path: dist/
diff --git a/.github/workflows/sync-spec.yml b/.github/workflows/sync-spec.yml
index 0038b7b..b5c44f1 100644
--- a/.github/workflows/sync-spec.yml
+++ b/.github/workflows/sync-spec.yml
@@ -47,7 +47,7 @@ jobs:
           uv run pyright
           uv run pytest -m "not live"
       - run: git diff > sync.patch
-      - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
+      - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: sync-patch
           path: sync.patch