diff --git a/.github/workflows/api-breaking-changes.yml b/.github/workflows/api-breaking-changes.yml
index 1de45b2..0130287 100644
--- a/.github/workflows/api-breaking-changes.yml
+++ b/.github/workflows/api-breaking-changes.yml
@@ -93,7 +93,7 @@ jobs:
         run: Scripts/verify-public-api.py --update
 
       - name: Preserve baseline
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7
         with:
           name: public-api-snapshot
           path: API/PublicAPI.json
diff --git a/.github/workflows/swift-package.yml b/.github/workflows/swift-package.yml
index f96dd10..ce9308e 100644
--- a/.github/workflows/swift-package.yml
+++ b/.github/workflows/swift-package.yml
@@ -86,7 +86,7 @@ jobs:
 
       - name: Preserve native product build results
         if: always()
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7
         with:
           name: windows-products-${{ github.run_id }}-${{ github.run_attempt }}
           path: .build/windows-products/
@@ -141,7 +141,7 @@ jobs:
 
       - name: Preserve native runtime results
         if: always()
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7
         with:
           name: windows-runtime-${{ github.run_id }}-${{ github.run_attempt }}
           path: .build/windows-runtime/
diff --git a/.github/workflows/windows-mcp.yml b/.github/workflows/windows-mcp.yml
index 21825c6..a00f36c 100644
--- a/.github/workflows/windows-mcp.yml
+++ b/.github/workflows/windows-mcp.yml
@@ -36,7 +36,7 @@ jobs:
 
       - name: Preserve native CodexMCP evidence
         if: always()
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7
         with:
           name: windows-codex-mcp-${{ github.run_id }}-${{ github.run_attempt }}
           path: .build/windows-mcp/evidence/