diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 43c1d75..8d37fc9 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -112,7 +112,7 @@ jobs:
 
       - name: Upload audit artifact (always)
         if: ${{ always() && steps.audit.outputs.high_or_critical != '' && github.actor != 'nektos/act' }}
-        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4
+        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f
         with:
           name: npm-audit-${{ matrix.node }}
           path: packages/plugin/audit.json
diff --git a/.github/workflows/e2e-webkit.yml b/.github/workflows/e2e-webkit.yml
index eb808c6..5023595 100644
--- a/.github/workflows/e2e-webkit.yml
+++ b/.github/workflows/e2e-webkit.yml
@@ -45,7 +45,7 @@ jobs:
 
       - name: Upload Playwright artifacts (always)
         if: always()
-        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4
+        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f
         with:
           name: playwright-artifacts-webkit
           path: |
@@ -55,7 +55,7 @@ jobs:
 
       - name: Upload JUnit report (always)
         if: always()
-        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4
+        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f
         with:
           name: e2e-junit-webkit
           path: test-results/e2e-junit.xml
diff --git a/.github/workflows/e2e.yml b/.github/workflows/e2e.yml
index ffa7689..a8f4eb8 100644
--- a/.github/workflows/e2e.yml
+++ b/.github/workflows/e2e.yml
@@ -52,7 +52,7 @@ jobs:
 
       - name: Upload Playwright artifacts (always)
         if: always()
-        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4
+        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f
         with:
           name: playwright-artifacts-${{ matrix.browser }}
           path: |
@@ -62,7 +62,7 @@ jobs:
 
       - name: Upload JUnit report (always)
         if: always()
-        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4
+        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f
         with:
           name: e2e-junit-${{ matrix.browser }}
           path: test-results/e2e-junit.xml
diff --git a/.github/workflows/openssf-scorecard.yml b/.github/workflows/openssf-scorecard.yml
index f508a77..9bb5438 100644
--- a/.github/workflows/openssf-scorecard.yml
+++ b/.github/workflows/openssf-scorecard.yml
@@ -50,7 +50,7 @@ jobs:
           sarif_file: results.sarif
 
       - name: Upload raw Scorecard results artifact (optional)
-        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4
+        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f
         with:
           name: scorecard-json
           path: results.sarif
diff --git a/.github/workflows/size-limit.yml b/.github/workflows/size-limit.yml
index 43eba52..d48291f 100644
--- a/.github/workflows/size-limit.yml
+++ b/.github/workflows/size-limit.yml
@@ -30,7 +30,7 @@ jobs:
       - name: Upload size artifact
         # Skip artifact upload under act (no ACTIONS_RUNTIME_TOKEN)
         if: ${{ always() && github.actor != 'nektos/act' }}
-        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4
+        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f
         with:
           name: size-limit-${{ github.sha }}
           path: size-limit.json
diff --git a/.github/workflows/storybook-tests.yml b/.github/workflows/storybook-tests.yml
index 2770119..926f591 100644
--- a/.github/workflows/storybook-tests.yml
+++ b/.github/workflows/storybook-tests.yml
@@ -65,7 +65,7 @@ jobs:
 
       - name: Upload artifacts on failure
         if: failure()
-        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4
+        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f
         with:
           name: storybook-tests-artifacts
           path: |