diff --git a/.github/workflows/ci-cd.yml b/.github/workflows/ci-cd.yml
index c6b9c16..157989b 100644
--- a/.github/workflows/ci-cd.yml
+++ b/.github/workflows/ci-cd.yml
@@ -53,7 +53,7 @@ jobs:
         run: python -m benchmarks.autonomy_runtime --iterations 100 --warmup 10 > benchmark-results.json
       - name: Upload test evidence
         if: always()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: python-${{ matrix.python-version }}-evidence
           path: |
diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
index 5813efb..5bdbd10 100644
--- a/.github/workflows/security.yml
+++ b/.github/workflows/security.yml
@@ -66,7 +66,7 @@ jobs:
           path: .
           format: cyclonedx-json
           output-file: sbom.cdx.json
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@v7
         with:
           name: helixagent-sbom
           path: sbom.cdx.json
@@ -87,7 +87,7 @@ jobs:
           pip-audit -r requirements.txt --format json --output pip-audit.json
           echo "Dependency findings retained for triage."
           exit 0
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@v7
         with:
           name: pip-audit-report
           path: pip-audit.json