diff --git a/.github/workflows/formulus-android.yml b/.github/workflows/formulus-android.yml
index 821f317c8..602a2422f 100644
--- a/.github/workflows/formulus-android.yml
+++ b/.github/workflows/formulus-android.yml
@@ -70,7 +70,7 @@ jobs:
         run: pnpm run build:copy
 
       - name: Upload formplayer assets artifact
-        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
         with:
           name: formplayer-assets
           path: formulus/android/app/src/main/assets/formplayer_dist
@@ -89,7 +89,7 @@ jobs:
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
 
       - name: Download formplayer assets artifact
-        uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
         with:
           name: formplayer-assets
           path: formulus/android/app/src/main/assets/formplayer_dist
@@ -227,7 +227,7 @@ jobs:
           -PreactNativeArchitectures=${{ env.FORMULUS_ABIS_RELEASE }}
 
       - name: Upload APK artifact
-        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
         with:
           name: formulus-android-apk-${{ github.event_name }}-${{ github.run_id }}
           path: |
@@ -235,7 +235,7 @@ jobs:
 
       - name: Upload AAB artifact
         if: github.event_name != 'pull_request'
-        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
         with:
           name: formulus-android-aab-${{ github.event_name }}-${{ github.run_id }}
           path: |
diff --git a/.github/workflows/ode-desktop.yml b/.github/workflows/ode-desktop.yml
index 74546b842..bde0fa15c 100644
--- a/.github/workflows/ode-desktop.yml
+++ b/.github/workflows/ode-desktop.yml
@@ -183,7 +183,7 @@ jobs:
         uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
 
       - name: Download embedded formplayer
-        uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
         with:
           name: desktop-formplayer-dist
           path: desktop/public/formplayer_dist
@@ -344,7 +344,7 @@ jobs:
         uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
 
       - name: Download embedded formplayer
-        uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
         with:
           name: desktop-formplayer-dist
           path: desktop/public/formplayer_dist
diff --git a/.github/workflows/sbom-release.yml b/.github/workflows/sbom-release.yml
index f1619eaf2..cccf98c06 100644
--- a/.github/workflows/sbom-release.yml
+++ b/.github/workflows/sbom-release.yml
@@ -63,7 +63,7 @@ jobs:
 
       - name: Upload SBOM artifact (manual runs)
         if: github.event_name == 'workflow_dispatch'
-        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
         with:
           name: cyclonedx-sbom
           path: sbom-dist/*.cdx.json
diff --git a/.github/workflows/synkronus-cli-docker.yml b/.github/workflows/synkronus-cli-docker.yml
index 0a5b3ff21..7c73a50c4 100644
--- a/.github/workflows/synkronus-cli-docker.yml
+++ b/.github/workflows/synkronus-cli-docker.yml
@@ -71,7 +71,7 @@ jobs:
           CGO_ENABLED=0 GOOS=linux GOARCH=arm64 go build -ldflags="${LD_FLAGS}" -o "${ROOT}/docker-dist/synk-linux-arm64" ./cmd/synkronus
 
       - name: Upload docker build context artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
         with:
           name: synkronus-cli-docker-dist
           path: docker-dist/
@@ -91,7 +91,7 @@ jobs:
         uses: actions/checkout@v4
 
       - name: Download docker build context
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
         with:
           name: synkronus-cli-docker-dist
           path: docker-dist/
@@ -155,7 +155,7 @@ jobs:
         uses: actions/checkout@v4
 
       - name: Download docker build context
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
         with:
           name: synkronus-cli-docker-dist
           path: docker-dist/
diff --git a/.github/workflows/synkronus-docker.yml b/.github/workflows/synkronus-docker.yml
index 5681fe50e..3afbf0d3d 100644
--- a/.github/workflows/synkronus-docker.yml
+++ b/.github/workflows/synkronus-docker.yml
@@ -115,7 +115,7 @@ jobs:
           cp -a static "${ROOT}/docker-dist/"
 
       - name: Upload docker build context artifact
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
         with:
           name: synkronus-docker-dist
           path: docker-dist/
@@ -135,7 +135,7 @@ jobs:
         uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
 
       - name: Download docker build context
-        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
         with:
           name: synkronus-docker-dist
           path: docker-dist/
@@ -201,7 +201,7 @@ jobs:
         uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
 
       - name: Download docker build context
-        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
         with:
           name: synkronus-docker-dist
           path: docker-dist/