diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index c27308b..466d9ae 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -35,7 +35,7 @@ jobs:
       # nothing else would notice. tests/ checks the source tree; this checks the artifact.
       - name: py.typed is in the wheel
         run: python -m zipfile -l dist/*.whl | grep -q 'postflight/py.typed'
-      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+      - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: dist
           path: dist/
@@ -51,14 +51,14 @@ jobs:
     permissions:
       id-token: write
     steps:
-      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+      - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
         with:
           name: dist
           path: dist/
       # Trusted Publishing (OIDC) — no API token exists to leak or rotate. PEP 740
       # attestations are generated and uploaded automatically since v1.11.0; an explicit
       # sigstore signing job would be duplicative.
-      - uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # v1.14.2
+      - uses: pypa/gh-action-pypi-publish@7245906fb61fa33a13554f9d5fb856fe61758086 # v1.14.3
 
   # Attaching the built artifacts to the Release that triggered this. Its own job so the
   # publish job keeps `id-token: write` as its ONLY permission — `contents: write` has no
@@ -70,7 +70,7 @@ jobs:
     permissions:
       contents: write
     steps:
-      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+      - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
         with:
           name: dist
           path: dist/