diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index f52aad0..20874dd 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -39,7 +39,7 @@ jobs:
         run: node scripts/pack.mjs
       - run: node scripts/audit-artifacts.mjs
       - run: pnpm verify:consumer ../latch-clean-consumer --chromium
-      - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+      - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         if: matrix.os == 'ubuntu-latest'
         with:
           name: latch-packages
@@ -49,7 +49,7 @@ jobs:
             artifacts/latch-local-*-${{ steps.package.outputs.version }}.tgz.sha256
             artifacts/SHA256SUMS
           if-no-files-found: error
-      - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+      - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         if: always()
         with:
           name: latch-reports-${{ matrix.os }}