diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index be62cc9..c4efe62 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -59,7 +59,7 @@ jobs:
 
       - name: Upload layout artifacts
         if: always()
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: layout-${{ matrix.os }}-${{ matrix.rust }}
           path: target/layout-artifacts
diff --git a/.github/workflows/performance.yml b/.github/workflows/performance.yml
index 60b5c66..b27c257 100644
--- a/.github/workflows/performance.yml
+++ b/.github/workflows/performance.yml
@@ -42,7 +42,7 @@ jobs:
 
       - name: Upload allocation evidence
         if: always()
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: allocation-evidence
           path: target/allocation-evidence.log
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 2a27144..7c3f727 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -107,7 +107,7 @@ jobs:
           sha256sum "cheetah-string-$VERSION.crate" > "cheetah-string-$VERSION.crate.sha256"
 
       - name: Upload release candidate
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: cheetah-string-release-candidate
           path: |