diff --git a/.github/workflows/android.yml b/.github/workflows/android.yml
index d9ff6a1..4f77f57 100644
--- a/.github/workflows/android.yml
+++ b/.github/workflows/android.yml
@@ -107,7 +107,7 @@ jobs:
 
       - name: Upload reports on failure
         if: failure()
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: reports
           path: |
diff --git a/.github/workflows/publish-play.yml b/.github/workflows/publish-play.yml
index bc24f97..750ecf1 100644
--- a/.github/workflows/publish-play.yml
+++ b/.github/workflows/publish-play.yml
@@ -157,7 +157,7 @@ jobs:
           test -f play/whatsnew/whatsnew-en-US || { echo "::error::no en-US changelog for $CODE"; exit 1; }
           ls -lR play
 
-      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+      - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: play-release
           path: play/