diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index f328bfa..3e5dba8 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -139,7 +139,7 @@ jobs:
           ! "$bin" import --bundle-path __no_such_bundle__
 
       - name: Upload artifact
-        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
+        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
         with:
           name: ${{ matrix.os.artifact }}
           path: build/${{ matrix.os.bin }}
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index f890fb8..b13571a 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -250,7 +250,7 @@ jobs:
           printf '%s\n' "${{ steps.release_notes.outputs.notes }}" > release-notes.md
 
       - name: Upload staged release assets
-        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
+        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
         with:
           name: release-assets
           path: |
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 9146136..3ba64b3 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -173,7 +173,7 @@ jobs:
         run: uv run pytest
 
       - name: Upload coverage artifact
-        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
+        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
         with:
           name: coverage-report
           path: coverage.xml