diff --git a/.github/workflows/release-codeql.yml b/.github/workflows/release-codeql.yml
index 87a48c3..ae394a3 100644
--- a/.github/workflows/release-codeql.yml
+++ b/.github/workflows/release-codeql.yml
@@ -127,7 +127,7 @@ jobs:
           ls -lh dist-packs/
 
       - name: CodeQL - Upload CodeQL pack artifacts
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
         with:
           name: codeql-tool-query-packs-${{ steps.version.outputs.version }}
           path: dist-packs/*.tar.gz
diff --git a/.github/workflows/release-npm.yml b/.github/workflows/release-npm.yml
index efafbb8..9060d44 100644
--- a/.github/workflows/release-npm.yml
+++ b/.github/workflows/release-npm.yml
@@ -99,7 +99,7 @@ jobs:
           echo "✅ Published npm package to npmjs.org (with provenance)"
 
       - name: npm - Upload release build artifact
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
         with:
           name: release-build-${{ steps.version.outputs.version }}
           path: |
diff --git a/.github/workflows/release-vsix.yml b/.github/workflows/release-vsix.yml
index 2d7b5f6..97a4542 100644
--- a/.github/workflows/release-vsix.yml
+++ b/.github/workflows/release-vsix.yml
@@ -112,7 +112,7 @@ jobs:
           done
 
       - name: VSIX - Upload artifact
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
         with:
           name: codeql-development-mcp-server-vsix-${{ steps.version.outputs.version }}
           path: extensions/vscode/${{ steps.package.outputs.vsix_name }}
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 296df7d..a6fb9f5 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -232,7 +232,7 @@ jobs:
           tar -czvf codeql-development-mcp-server-${{ needs.resolve-version.outputs.version }}.tar.gz -C dist-package .
 
       - name: Release - Upload artifact
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
         with:
           name: codeql-development-mcp-server-${{ needs.resolve-version.outputs.version }}
           path: codeql-development-mcp-server-${{ needs.resolve-version.outputs.version }}.tar.gz