diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml
index 67acff5..8c7763c 100644
--- a/.github/workflows/release-please.yml
+++ b/.github/workflows/release-please.yml
@@ -77,7 +77,7 @@ jobs:
           test "$#" -eq 1 && test -f "$1"
           printf 'filename=%s\n' "$1" >> "$GITHUB_OUTPUT"
           printf 'sha256=%s\n' "$(sha256sum "$1" | cut -d ' ' -f 1)" >> "$GITHUB_OUTPUT"
-      - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
+      - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         id: upload
         with:
           name: npm-release
diff --git a/.github/workflows/windows-rust-diagnostics.yml b/.github/workflows/windows-rust-diagnostics.yml
index f5e7cb5..a1ec4e4 100644
--- a/.github/workflows/windows-rust-diagnostics.yml
+++ b/.github/workflows/windows-rust-diagnostics.yml
@@ -117,7 +117,7 @@ jobs:
           })
           $records | ConvertTo-Json | Set-Content target/debug/artifact-manifest.json -Encoding utf8
           $records | Format-Table
-      - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
+      - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: windows-rust-diagnostic-research
           retention-days: 7
@@ -197,7 +197,7 @@ jobs:
             -Destination target/preview-package `
             -SourceSha $sourceSha `
             -ExpectedSha256 $env:PREVIEW_TESTED_SHA256
-      - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
+      - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         id: preview-upload
         with:
           name: windows-diagnostics-preview-windows-x86_64