diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index e4cdcfd3..62d077b9 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -79,7 +79,7 @@ jobs:
       - name: Verify GCP Pulumi project
         run: pnpm test:gcp-pulumi
       - name: Upload compiled application
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: pr-compiled-${{ github.run_id }}-${{ github.run_attempt }}
           path: dist/
@@ -155,7 +155,7 @@ jobs:
         run: pnpm test:web:prebuilt
       - name: Upload browser diagnostics
         if: ${{ !cancelled() }}
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: pr-browser-${{ github.run_id }}-${{ github.run_attempt }}
           path: test-results/browser/
@@ -342,7 +342,7 @@ jobs:
         run: pnpm test:oidc
 
       - name: Upload full-gate evidence
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: full-gate-evidence-${{ github.run_id }}-${{ github.run_attempt }}
           path: |
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index c9f1971f..aeab8df5 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -169,7 +169,7 @@ jobs:
           "$ARTIFACTSERVER_VERSION"
           packages
       - name: Upload package release inputs
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: release-packages-${{ github.run_id }}-${{ github.run_attempt }}
           path: release/package-bundle/
@@ -270,7 +270,7 @@ jobs:
             fi
           done
       - name: Upload image release inputs
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: release-image-${{ github.run_id }}-${{ github.run_attempt }}
           path: |
@@ -311,7 +311,7 @@ jobs:
         working-directory: release/public
         run: sha256sum --check --strict SHA256SUMS
       - name: Upload downloadable release assets
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: release-public-${{ github.run_id }}-${{ github.run_attempt }}
           path: release/public/