diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 8e65345..1280961 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -37,7 +37,7 @@ jobs:
         run: ./scripts/package-release.sh release-artifacts "${RELEASE_TAG}" "${GITHUB_SHA}"
 
       - name: Preserve sealed source release
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: source-release
           path: release-artifacts/*
@@ -182,7 +182,7 @@ jobs:
           )
 
       - name: Preserve exact archive SPDX
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: release-sbom
           path: release-artifacts/sbom.spdx.json*