diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 2dc611e..19784a4 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -103,7 +103,7 @@ jobs:
           check-latest: true
           cache: false # this job holds the signing key; no restored cache may run in it
 
-      - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
+      - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
         with:
           name: Syncer
           path: dist