diff --git a/.github/workflows/busybox.yml b/.github/workflows/busybox.yml
index 0f8d9cc583..f203684972 100644
--- a/.github/workflows/busybox.yml
+++ b/.github/workflows/busybox.yml
@@ -301,7 +301,7 @@ jobs:
 
       - name: Upload BusyBox binary
         if: matrix.enabled == 1
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a #v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 #v7.0.2
         with:
           name: busybox-eld-${{ matrix.arch }}${{ matrix.libc == 'gnu' && '-gnu' || '' }}
           path: busybox/busybox
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 97d1ebf71a..bb4b5679b7 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -287,7 +287,7 @@ jobs:
 
       - name: Upload PR ELD toolset
         if: steps.file-check.outputs.skip_build == 'false'
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a #v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 #v7.0.2
         with:
           name: ${{ (inputs.pr_sha != '' && format('pr-eld-toolset-{0}', needs.resolve.outputs.head_sha)) || 'pr-eld-toolset' }}
           # Keep a fallback copy in case the workflow fails before cleanup.
diff --git a/.github/workflows/cpp-linter-pr.yml b/.github/workflows/cpp-linter-pr.yml
index a20feca85d..fb436ae887 100644
--- a/.github/workflows/cpp-linter-pr.yml
+++ b/.github/workflows/cpp-linter-pr.yml
@@ -200,7 +200,7 @@ jobs:
 
       - name: Upload cpp-linter report artifact
         if: always()
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a #v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 #v7.0.2
         with:
           # Stable artifact name referenced by PR comment and docs.
           name: cpp-linter-report
diff --git a/.github/workflows/linux-kernel-run.yml b/.github/workflows/linux-kernel-run.yml
index 95cca490de..3f4bc3e219 100644
--- a/.github/workflows/linux-kernel-run.yml
+++ b/.github/workflows/linux-kernel-run.yml
@@ -268,7 +268,7 @@ jobs:
 
       - name: Upload vmlinux and linker map
         if: inputs.enabled == 1 && always()
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a #v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 #v7.0.2
         with:
           name: kernel-boot-${{ inputs.arch }}-vmlinux
           # Keep a fallback copy in case the workflow fails before cleanup.
@@ -363,7 +363,7 @@ jobs:
 
       - name: Upload boot log
         if: inputs.enabled == 1 && always()
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a #v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 #v7.0.2
         with:
           name: kernel-boot-${{ inputs.arch }}-log
           # Keep a fallback copy in case the workflow fails before cleanup.
diff --git a/.github/workflows/llvm-test-suite-pr.yml b/.github/workflows/llvm-test-suite-pr.yml
index e1b7877ae9..49710a53ae 100644
--- a/.github/workflows/llvm-test-suite-pr.yml
+++ b/.github/workflows/llvm-test-suite-pr.yml
@@ -156,7 +156,7 @@ jobs:
 
       - name: Upload test output
         if: always()
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a #v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 #v7.0.2
         with:
           name: llvm-test-suite-results-${{ inputs.pr_sha }}
           path: test-output.txt
diff --git a/.github/workflows/nightly-llvm-test-suite.yml b/.github/workflows/nightly-llvm-test-suite.yml
index 7b05c1eaac..3bb670de5a 100644
--- a/.github/workflows/nightly-llvm-test-suite.yml
+++ b/.github/workflows/nightly-llvm-test-suite.yml
@@ -110,7 +110,7 @@ jobs:
 
       - name: Upload test output
         if: always()
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: llvm-test-suite-results
           path: test-output.txt
diff --git a/.github/workflows/nightly-musl-builder.yml b/.github/workflows/nightly-musl-builder.yml
index 9cd4c407d2..d806e51058 100644
--- a/.github/workflows/nightly-musl-builder.yml
+++ b/.github/workflows/nightly-musl-builder.yml
@@ -218,7 +218,7 @@ jobs:
           CC="${ARCH}-unknown-linux-musl${arm_toolchain_name_suffix}-clang" make RUN_WRAP="$(pwd)/qemu-${ARCH}-wrapper.sh"
 
       - name: Upload libc-test
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a #v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 #v7.0.2
         with:
           name: libc-test-${{ matrix.arch }}.zip
           # Keep a fallback copy in case the workflow fails before cleanup.
diff --git a/.github/workflows/nightly-test.yml b/.github/workflows/nightly-test.yml
index c0b9f24e1b..8b652bb40f 100644
--- a/.github/workflows/nightly-test.yml
+++ b/.github/workflows/nightly-test.yml
@@ -259,7 +259,7 @@ jobs:
               -Jcvf eld-unstable.tar.xz eld-unstable
 
       - name: Upload toolchain tarball
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a #v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 #v7.0.2
         with:
           name: install-nightly-toolchain.tar.xz
           path: install-nightly-toolchain.tar.xz
diff --git a/.github/workflows/picolibc-builder.yml b/.github/workflows/picolibc-builder.yml
index 985de589fb..9d9d8a8d1f 100644
--- a/.github/workflows/picolibc-builder.yml
+++ b/.github/workflows/picolibc-builder.yml
@@ -272,7 +272,7 @@ jobs:
 
       - name: Upload test logs
         if: always()
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a #v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 #v7.0.2
         with:
           name: test-results-${{ matrix.arch.name }}
           path: |
diff --git a/.github/workflows/zephyr-run.yml b/.github/workflows/zephyr-run.yml
index 560b2ec74c..973b415058 100644
--- a/.github/workflows/zephyr-run.yml
+++ b/.github/workflows/zephyr-run.yml
@@ -287,7 +287,7 @@ jobs:
 
       - name: Upload twister results
         if: always()
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a #v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 #v7.0.2
         with:
           name: zephyr-twister-results-${{ inputs.board }}
           # Keep a fallback copy in case the workflow fails before cleanup.