diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 11c6148..21af60d 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -75,7 +75,7 @@ jobs:
             --generated "${GENERATED_FILE}" \
             --report "${RUNNER_TEMP}/axiom-report.txt"
       - name: Upload axiom report
-        uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: axiom-report
           path: ${{ runner.temp }}/axiom-report.txt
@@ -94,7 +94,7 @@ jobs:
           scripts/run_lean4checker.sh "${GITHUB_WORKSPACE}" \
             "${RUNNER_TEMP}/axiom-report-lean4checker.txt"
       - name: Upload lean4checker report
-        uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         if: always()
         with:
           name: axiom-report-lean4checker
diff --git a/.github/workflows/release-rc.yml b/.github/workflows/release-rc.yml
index 7c1e057..a97d5b3 100644
--- a/.github/workflows/release-rc.yml
+++ b/.github/workflows/release-rc.yml
@@ -92,7 +92,7 @@ jobs:
           print("SBOM guard OK:", gen)
           PY
 
-      - uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0
+      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: rc-artifacts
           path: artifacts/
@@ -161,7 +161,7 @@ jobs:
 
       - name: Upload reproduction log
         if: always()
-        uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: reproduction-log
           path: |