diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index a30ae9177b..8924f80598 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -79,7 +79,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Download distributions
-        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
         with:
           artifact-ids: ${{ needs.build.outputs.artifact-id }}
           path: dist/
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index e601f1ab11..582b513a96 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -270,7 +270,7 @@ jobs:
           python-version: ${{ matrix.python-version }}
       - name: Download prospective release contract
         if: steps.changes.outputs.run == 'true'
-        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           name: prospective-release-contract
           path: .tmp
@@ -308,7 +308,7 @@ jobs:
           python-version: "3.14"
       - name: Download prospective release contract
         if: steps.changes.outputs.run == 'true'
-        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           name: prospective-release-contract
           path: .tmp