diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 6ebbf4f..b980700 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -51,7 +51,7 @@ jobs:
           docker run --rm shabbat-archive-ci php bin/runtime-permissions.php --require-non-root
           docker run --rm shabbat-archive-ci php bin/self-check.php --release
           docker run --rm -e EXPECTED_COMMIT shabbat-archive-ci php -r '$m=json_decode(file_get_contents("/app/build-info.json"),true,flags:JSON_THROW_ON_ERROR); if ($m["commit"]!==getenv("EXPECTED_COMMIT") || $m["local_changes"]!==false) { exit(1); } echo "Archive identity retained.\n";'
-      - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02
+      - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9
         if: matrix.php == '8.4'
         with:
           name: release-archives-${{ github.sha }}
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index d12796e..68a3501 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -32,7 +32,7 @@ jobs:
       - run: docker run --rm shabbat-release php bin/self-check.php --release
       - run: python3 tests/release_packaging_test.py
       - run: composer package
-      - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02
+      - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9
         with:
           name: reviewed-release-archives
           path: dist/