diff --git a/.github/workflows/findbugs.yml b/.github/workflows/findbugs.yml
index fe5aab05..493ccc8f 100644
--- a/.github/workflows/findbugs.yml
+++ b/.github/workflows/findbugs.yml
@@ -32,7 +32,7 @@ jobs:
     - name: Generate report
       run: mvn spotbugs:spotbugs
     - name: Upload FindBugs report as a workflow artifact
-      uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
+      uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
       with:
         name: findbugs-report
         path: target/spotbugsXml.xml
diff --git a/.github/workflows/publish-release.yml b/.github/workflows/publish-release.yml
index 61611b23..d7db0e4b 100644
--- a/.github/workflows/publish-release.yml
+++ b/.github/workflows/publish-release.yml
@@ -57,7 +57,7 @@ jobs:
           echo "version=lpvs-${VERSION:1}.jar" >> "$GITHUB_OUTPUT"
 
       - name: Upload build artifacts
-        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
+        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
         with:
           name: ${{ steps.lpvs_version.outputs.version }}
           path: ./target/${{ steps.lpvs_version.outputs.version }}
diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml
index 9b880c4f..a49d8b27 100644
--- a/.github/workflows/scorecards.yml
+++ b/.github/workflows/scorecards.yml
@@ -64,7 +64,7 @@ jobs:
       # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
       # format to the repository Actions tab.
       - name: "Upload artifact"
-        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
+        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
         with:
           name: SARIF file
           path: results.sarif
diff --git a/.github/workflows/test-suite.yml b/.github/workflows/test-suite.yml
index f074bfcf..c2194cbd 100644
--- a/.github/workflows/test-suite.yml
+++ b/.github/workflows/test-suite.yml
@@ -40,7 +40,7 @@ jobs:
       run: |
         echo "coverage = ${{ steps.jacoco.outputs.coverage }}"
     - name: Upload JaCoCo coverage report as a workflow artifact
-      uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
+      uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
       with:
         name: jacoco-report
         path: target/site/jacoco/