diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 67d38732..6f19092b 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -381,7 +381,7 @@ jobs:
         run: |
           artifact_name="$(bun scripts/ci-artifacts.mjs resolve --repository "${GITHUB_REPOSITORY}" --run-id "${GITHUB_RUN_ID}" --prefix "frontend-public-${GITHUB_SHA}-")"
           echo "name=${artifact_name}" >> "${GITHUB_OUTPUT}"
-      - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
+      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           name: ${{ steps.frontend-artifact.outputs.name }}
           path: backend/cmd/openpost/public
@@ -421,7 +421,7 @@ jobs:
         run: |
           artifact_name="$(bun scripts/ci-artifacts.mjs resolve --repository "${GITHUB_REPOSITORY}" --run-id "${GITHUB_RUN_ID}" --prefix "marketing-static-${GITHUB_SHA}-")"
           echo "name=${artifact_name}" >> "${GITHUB_OUTPUT}"
-      - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
+      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           name: ${{ steps.marketing-artifact.outputs.name }}
           path: marketing-site/dist
@@ -455,7 +455,7 @@ jobs:
         run: |
           artifact_name="$(bun scripts/ci-artifacts.mjs resolve --repository "${GITHUB_REPOSITORY}" --run-id "${GITHUB_RUN_ID}" --prefix "docs-static-${GITHUB_SHA}-")"
           echo "name=${artifact_name}" >> "${GITHUB_OUTPUT}"
-      - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
+      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           name: ${{ steps.docs-artifact.outputs.name }}
           path: docs-site/.vitepress/dist
@@ -587,7 +587,7 @@ jobs:
             !/frontend/static/video-editor-audio/
             !/frontend/static/video-editor-models/
           sparse-checkout-cone-mode: false
-      - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
+      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           name: frontend-public-${{ github.sha }}-${{ github.run_attempt }}
           path: backend/cmd/openpost/public