diff --git a/.github/workflows/ci-benchmark.yml b/.github/workflows/ci-benchmark.yml
index d2d09680..d4e03e64 100644
--- a/.github/workflows/ci-benchmark.yml
+++ b/.github/workflows/ci-benchmark.yml
@@ -372,7 +372,7 @@ jobs:
         # A red gate must still ship its evidence: the paired CSVs are what the
         # verdict table was computed from.
         if: always()
-        uses: actions/upload-artifact@v7.0.1
+        uses: actions/upload-artifact@v7.0.2
         with:
           name: benchmark-results-${{ github.run_id }}
           path: |
diff --git a/.github/workflows/ci-fuzz.yml b/.github/workflows/ci-fuzz.yml
index 7556bf5d..a06ba9b6 100644
--- a/.github/workflows/ci-fuzz.yml
+++ b/.github/workflows/ci-fuzz.yml
@@ -139,7 +139,7 @@ jobs:
           ./build_fuzz/fuzz_static_path -max_total_time=60 -max_len=256 -print_final_stats=1
       - name: Upload crash artifacts (if any)
         if: failure()
-        uses: actions/upload-artifact@v7.0.1
+        uses: actions/upload-artifact@v7.0.2
         with:
           name: fuzz-crash-artifacts
           path: |
diff --git a/.github/workflows/ci-nightly.yml b/.github/workflows/ci-nightly.yml
index 9535266b..95f11b3a 100644
--- a/.github/workflows/ci-nightly.yml
+++ b/.github/workflows/ci-nightly.yml
@@ -52,7 +52,7 @@ jobs:
           cd build && make -j$(nproc)
       
       - name: Upload build artifacts
-        uses: actions/upload-artifact@v7.0.1
+        uses: actions/upload-artifact@v7.0.2
         with:
           name: build-ubuntu-nightly-${{ github.run_number }}
           path: build/
@@ -90,7 +90,7 @@ jobs:
           echo "Checking dependencies..."
 
       - name: Upload security results
-        uses: actions/upload-artifact@v7.0.1
+        uses: actions/upload-artifact@v7.0.2
         with:
           name: security-results-nightly-${{ github.run_number }}
           path: |
@@ -140,7 +140,7 @@ jobs:
           genhtml coverage.info --output-directory coverage-report
 
       - name: Upload coverage report
-        uses: actions/upload-artifact@v7.0.1
+        uses: actions/upload-artifact@v7.0.2
         with:
           name: coverage-report-nightly-${{ github.run_number }}
           path: build/coverage-report/
@@ -180,7 +180,7 @@ jobs:
           cd build && ctest --output-on-failure
 
       - name: Upload coverage report
-        uses: actions/upload-artifact@v7.0.1
+        uses: actions/upload-artifact@v7.0.2
         with:
           name: coverage-report-nightly-${{ github.run_number }}
           path: build/coverage_html/
@@ -223,7 +223,7 @@ jobs:
           kill $SERVER_PID 2>/dev/null || true
 
       - name: Upload stress test results
-        uses: actions/upload-artifact@v7.0.1
+        uses: actions/upload-artifact@v7.0.2
         with:
           name: stress-test-results-nightly-${{ github.run_number }}
           path: |
@@ -268,7 +268,7 @@ jobs:
           parallel: 1
 
       - name: Upload UBSan test results
-        uses: actions/upload-artifact@v7.0.1
+        uses: actions/upload-artifact@v7.0.2
         with:
           name: ubsan-test-results-nightly-${{ github.run_number }}
           path: |
diff --git a/.github/workflows/ci-pr.yml b/.github/workflows/ci-pr.yml
index 3eb40587..231be997 100644
--- a/.github/workflows/ci-pr.yml
+++ b/.github/workflows/ci-pr.yml
@@ -68,7 +68,7 @@ jobs:
           fi
       
       - name: Upload build artifacts
-        uses: actions/upload-artifact@v7.0.1
+        uses: actions/upload-artifact@v7.0.2
         with:
           name: build-ubuntu-pr-${{ github.event.pull_request.number }}
           path: build/dist/
@@ -118,7 +118,7 @@ jobs:
 
       - name: Upload code quality results
         if: always()
-        uses: actions/upload-artifact@v7.0.1
+        uses: actions/upload-artifact@v7.0.2
         with:
           name: code-quality-pr-${{ github.event.pull_request.number }}
           path: cppcheck-results.xml
diff --git a/.github/workflows/ci-release-gate.yml b/.github/workflows/ci-release-gate.yml
index 32fcc81b..84c9f9c3 100644
--- a/.github/workflows/ci-release-gate.yml
+++ b/.github/workflows/ci-release-gate.yml
@@ -54,7 +54,7 @@ jobs:
           echo "status=success" >> $GITHUB_OUTPUT
 
       - name: Upload build artifacts
-        uses: actions/upload-artifact@v7.0.1
+        uses: actions/upload-artifact@v7.0.2
         with:
           name: build-release-${{ github.event.release.tag_name || github.run_id }}
           path: build/dist/
@@ -98,7 +98,7 @@ jobs:
 
       - name: Upload test logs
         if: always()
-        uses: actions/upload-artifact@v7.0.1
+        uses: actions/upload-artifact@v7.0.2
         with:
           name: test-logs-release-${{ github.event.release.tag_name || github.run_id }}
           path: build/Testing/
@@ -197,7 +197,7 @@ jobs:
 
       - name: Upload ASan test results
         if: always()
-        uses: actions/upload-artifact@v7.0.1
+        uses: actions/upload-artifact@v7.0.2
         with:
           name: asan-gate-release-${{ github.event.release.tag_name || github.run_id }}
           path: build-asan/Testing/