diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 8e65345..ff7200e 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -37,7 +37,7 @@ jobs:
         run: ./scripts/package-release.sh release-artifacts "${RELEASE_TAG}" "${GITHUB_SHA}"
 
       - name: Preserve sealed source release
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: source-release
           path: release-artifacts/*
@@ -182,7 +182,7 @@ jobs:
           )
 
       - name: Preserve exact archive SPDX
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: release-sbom
           path: release-artifacts/sbom.spdx.json*