diff --git a/.github/workflows/build-executables.yml b/.github/workflows/build-executables.yml
index 3fb2194..aca627c 100644
--- a/.github/workflows/build-executables.yml
+++ b/.github/workflows/build-executables.yml
@@ -82,7 +82,7 @@ jobs:
           uv run python scripts/smoke_test.py "dist/${{ matrix.asset_name }}" --version "$VERSION" --mcp --e2e
 
       - name: Upload artifacts
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: ${{ matrix.asset_name }}
           path: dist/${{ matrix.asset_name }}
diff --git a/.github/workflows/plugin-scan.yml b/.github/workflows/plugin-scan.yml
index 7b906ef..af806a1 100644
--- a/.github/workflows/plugin-scan.yml
+++ b/.github/workflows/plugin-scan.yml
@@ -30,7 +30,7 @@ jobs:
           output: scan-report.json
       - name: Upload scan report
         if: always()
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: plugin-scan-report
           path: scan-report.json