diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 9288308..bf85d03 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -117,7 +117,7 @@ jobs:
       - uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5 # v2.8.2
       - run: cargo build --release
       - name: Upload binary
-        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
+        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
         with:
           name: vbw-${{ matrix.os }}
           path: target/release/vbw
@@ -152,7 +152,7 @@ jobs:
       - name: Show report
         run: cat vbw-witness/vbw/report.json
       - name: Upload witness bundle
-        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
+        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
         with:
           name: vbw-witness-bundle
           path: vbw-witness/
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 6e1eaab..2756003 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -90,7 +90,7 @@ jobs:
           sha256sum dist/vbw-${{ matrix.target }} > dist/vbw-${{ matrix.target }}.sha256
 
       - name: Upload build artifacts
-        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
+        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
         with:
           name: release-${{ matrix.target }}
           path: dist/