diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index e1fdf14..ce0392a 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -213,7 +213,7 @@ jobs:
 
       - name: Upload QualOps Reports
         if: always()
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
         with:
           name: qualops-reports
           path: .qualops/reports/
diff --git a/.github/workflows/npm-publish.yml b/.github/workflows/npm-publish.yml
index b40bd04..7dc0ecf 100644
--- a/.github/workflows/npm-publish.yml
+++ b/.github/workflows/npm-publish.yml
@@ -113,7 +113,7 @@ jobs:
         run: npm pack
 
       - name: Upload build artifacts
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
         with:
           name: npm-package
           path: '*.tgz'
diff --git a/.github/workflows/provider-dialect-smoke.yml b/.github/workflows/provider-dialect-smoke.yml
index b7f81b4..754aaf1 100644
--- a/.github/workflows/provider-dialect-smoke.yml
+++ b/.github/workflows/provider-dialect-smoke.yml
@@ -60,7 +60,7 @@ jobs:
 
       - name: Upload run log
         if: always()
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: smoke-run-log-${{ github.run_id }}
           path: evals/logs/smoke_*.json
diff --git a/action.yml b/action.yml
index 0738ed4..d7425ec 100644
--- a/action.yml
+++ b/action.yml
@@ -117,7 +117,7 @@ runs:
 
     - name: Upload QualOps Reports
       if: always()
-      uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+      uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
       with:
         name: qualops-reports
         path: .qualops/reports/