diff --git a/.github/workflows/deps-update.yml b/.github/workflows/deps-update.yml
index 13201785..9e892640 100644
--- a/.github/workflows/deps-update.yml
+++ b/.github/workflows/deps-update.yml
@@ -64,7 +64,7 @@ jobs:
           git diff --staged --patch > "${{ runner.temp }}/go.diff.patch"
 
       - name: Upload Artifact
-        uses: actions/upload-artifact@84480863f228bb9747b473957fcc9e309aa96097 # v4
+        uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4
         with:
           name: Patches
           path: ${{ runner.temp }}/go.diff.patch
diff --git a/.github/workflows/docsite.yml b/.github/workflows/docsite.yml
index 6c966e2c..7ba7fdb7 100644
--- a/.github/workflows/docsite.yml
+++ b/.github/workflows/docsite.yml
@@ -35,7 +35,7 @@ jobs:
         # identical to hugo's.
         run: go -C ./docs run github.com/gohugoio/hugo --minify --enableGitInfo --environment=gh-pages
       - name: Upload Artifact
-        uses: actions/upload-artifact@84480863f228bb9747b473957fcc9e309aa96097 # v4
+        uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4
         with:
           name: site
           path: docs/public/
diff --git a/.github/workflows/ossf-scorecard.yml b/.github/workflows/ossf-scorecard.yml
index 266570fb..fcb3361c 100644
--- a/.github/workflows/ossf-scorecard.yml
+++ b/.github/workflows/ossf-scorecard.yml
@@ -35,7 +35,7 @@ jobs:
 
       # Upload the results as artifacts.
       - name: "Upload artifact"
-        uses: actions/upload-artifact@84480863f228bb9747b473957fcc9e309aa96097 # v4
+        uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4
         with:
           name: SARIF file
           path: results.sarif
diff --git a/.github/workflows/validate.yml b/.github/workflows/validate.yml
index 8410f47f..600969f4 100644
--- a/.github/workflows/validate.yml
+++ b/.github/workflows/validate.yml
@@ -86,7 +86,7 @@ jobs:
           git diff --staged --patch --exit-code > .repo.patch || echo 'result=true' >> "${GITHUB_OUTPUT}"
       - name: Upload patch
         if: github.event_name != 'push' && steps.is-tree-dirty.outputs.result == 'true'
-        uses: actions/upload-artifact@84480863f228bb9747b473957fcc9e309aa96097 # v4
+        uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4
         with:
           if-no-files-found: error
           include-hidden-files: true
@@ -248,7 +248,7 @@ jobs:
           set -euo pipefail
           go test -bench=. -timeout=1h -run=^$ . | tee ${{ runner.temp }}/benchmarks.txt
       - name: Upload benchmark report (raw)
-        uses: actions/upload-artifact@84480863f228bb9747b473957fcc9e309aa96097 # v4
+        uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4
         with:
           if-no-files-found: error
           name: Benchmark Report