diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index b9bf66a..abee31e 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -129,7 +129,7 @@ jobs:
         }
 
     - name: Upload plugin artifact
-      uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
+      uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
       with:
         compression-level: 1
         if-no-files-found: error
@@ -151,7 +151,7 @@ jobs:
         show-progress: false
 
     - name: Download plugin artifact from ubuntu-latest
-      uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
+      uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
       with:
         name: ubuntu-latest_${{ needs.publish.outputs.PLUGIN_NAME }}
         path: out
@@ -178,7 +178,7 @@ jobs:
         )
 
     - name: Upload SHA512SUMS
-      uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
+      uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
       with:
         compression-level: 1
         if-no-files-found: error
@@ -186,7 +186,7 @@ jobs:
         path: out/SHA512SUMS
 
     - name: Upload SHA512SUMS.sign
-      uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
+      uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
       if: ${{ env.GPG_PRIVATE_KEY != null }}
       with:
         compression-level: 1