diff --git a/.github/workflows/full-confidence.yml b/.github/workflows/full-confidence.yml
index 13ffc628..2e27bf2f 100644
--- a/.github/workflows/full-confidence.yml
+++ b/.github/workflows/full-confidence.yml
@@ -173,7 +173,7 @@ jobs:
         run: python3 scripts/bench-compare.py
       - name: upload benchmark results
         if: always()
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: bench-results
           path: build/bench-results.json
diff --git a/.github/workflows/release-rehearsal.yml b/.github/workflows/release-rehearsal.yml
index 3011e2b9..cd473940 100644
--- a/.github/workflows/release-rehearsal.yml
+++ b/.github/workflows/release-rehearsal.yml
@@ -62,7 +62,7 @@ jobs:
           chmod +x "$binary"
           make axis-self BUILD_BIN="$binary"
           git diff --exit-code
-      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+      - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: aoci-release-rehearsal-${{ github.sha }}
           path: dist/
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index b8caf069..803ea5ee 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -418,7 +418,7 @@ jobs:
 
       - name: Upload the exact signed asset handoff
         id: upload-release-assets
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: aoci-signed-release-${{ steps.identity.outputs.source_commit }}
           path: ${{ runner.temp }}/aoci-release-assets/*