diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 866499a8..5d1e6ece 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -47,7 +47,7 @@ jobs:
             --short-PURLs
       - name: Upload SBOM artifact
         if: steps.changesets.outputs.published == 'true'
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: sbom-cyclonedx
           path: sbom.cdx.json
diff --git a/.github/workflows/visual.yml b/.github/workflows/visual.yml
index a1b719d5..d6013d3a 100644
--- a/.github/workflows/visual.yml
+++ b/.github/workflows/visual.yml
@@ -67,7 +67,7 @@ jobs:
 
       - name: Upload diffs on failure
         if: failure()
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: visual-report
           path: |
@@ -77,7 +77,7 @@ jobs:
 
       - name: Upload baselines (when bootstrapping)
         if: env.UPDATE_BASELINES == 'true'
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: visual-baselines-linux
           path: apps/visual-react/tests/visual.spec.ts-snapshots