diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 33cb5a0..4d8c3d7 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -106,7 +106,7 @@ jobs:
         run: ls -alh ./build
 
       - name: upload artifacts
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: wpm-${{ steps.platform.outputs.pair }}
           path: ./build/wpm-*
@@ -238,7 +238,7 @@ jobs:
           targets: image-cross
 
       - name: download artifacts
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c #v8.0.1
+        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 #v8.0.2
         with:
           path: ./build
           pattern: wpm-*