diff --git a/.github/workflows/changelog-report.yml b/.github/workflows/changelog-report.yml
index ccc858aff8..c2ac8f5666 100644
--- a/.github/workflows/changelog-report.yml
+++ b/.github/workflows/changelog-report.yml
@@ -64,7 +64,7 @@ jobs:
           changelog_entries=$(jq --arg start_date "${START_DATE}" --arg end_date "${END_DATE}" ' map(select(.date >= $start_date and .date <= $end_date))' changelog/internal/changelog-all.json)
           echo "${changelog_entries}" > entries.json
       - name: Upload entries for debugging
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9
         with:
           name: changelog_entries_in_range
           retention-days: 1
diff --git a/.github/workflows/generate-openapi.yml b/.github/workflows/generate-openapi.yml
index 336c3608a0..96f13d0c4f 100644
--- a/.github/workflows/generate-openapi.yml
+++ b/.github/workflows/generate-openapi.yml
@@ -74,7 +74,7 @@ jobs:
       - name: Generate Federated Spec
         run: .github/scripts/generate_federated_spec.sh
       - name: Upload artifact
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9
         with:
           name: openapi-foas-${{ inputs.env }}
           path: |
diff --git a/.github/workflows/release-IPA-metrics.yml b/.github/workflows/release-IPA-metrics.yml
index 2a2e986eb3..fca893ccd3 100644
--- a/.github/workflows/release-IPA-metrics.yml
+++ b/.github/workflows/release-IPA-metrics.yml
@@ -65,7 +65,7 @@ jobs:
         working-directory: ${{ github.workspace }}
 
       - name: Upload OAS files as artifacts
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9
         with:
           name: oas-files
           path: |
@@ -82,7 +82,7 @@ jobs:
           echo "WARNING_COUNT=$(cat ../outputs/warning-count.txt)" >> "$GITHUB_ENV"
 
       - name: Upload Warning Violations as Artifact
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9
         with:
           name: warning-violations
           path: tools/spectral/ipa/metrics/outputs/warning-violations.json
diff --git a/.github/workflows/release-changelog.yml b/.github/workflows/release-changelog.yml
index 7d6f756d14..eb059b3edc 100644
--- a/.github/workflows/release-changelog.yml
+++ b/.github/workflows/release-changelog.yml
@@ -102,7 +102,7 @@ jobs:
             S3_BUCKET: ${{ inputs.aws_s3_bucket }}
           run: ./release-scripts/generate_changelog.sh
         - name: Upload revision and base folders for debugging
-          uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
+          uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9
           with:
             name: base-revision-${{ inputs.env }}
             retention-days: 1
diff --git a/.github/workflows/release-spec-runner.yml b/.github/workflows/release-spec-runner.yml
index 1b64c39218..f25339df88 100644
--- a/.github/workflows/release-spec-runner.yml
+++ b/.github/workflows/release-spec-runner.yml
@@ -43,7 +43,7 @@ jobs:
       # We upload the scripts in .github/scripts/* (defined only in main) so that they can be downloaded and reused 
       # when releasing in all the branches.
       - name: Upload release scripts 
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9
         with:
           name: release-scripts
           retention-days: 1
diff --git a/.github/workflows/release-spec-v1.yml b/.github/workflows/release-spec-v1.yml
index 1ec6b361c4..2a85d33cab 100644
--- a/.github/workflows/release-spec-v1.yml
+++ b/.github/workflows/release-spec-v1.yml
@@ -56,7 +56,7 @@ jobs:
       - name: Generate YAML spec
         run: yq -P '.' v1.json > v1.yaml
       - name: Upload artifact
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9
         with:
           name: openapi-v1-${{ inputs.env }}
           path: |
diff --git a/.github/workflows/release-spec.yml b/.github/workflows/release-spec.yml
index f8f48bde6e..0ee117db29 100644
--- a/.github/workflows/release-spec.yml
+++ b/.github/workflows/release-spec.yml
@@ -114,7 +114,7 @@ jobs:
             ref: ${{ inputs.branch }}
             token: ${{secrets.api_bot_pat}}
         - name: Upload current Specs and Changelog files
-          uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
+          uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9
           with:
             name: base-${{ inputs.env }}
             retention-days: 1