diff --git a/.github/workflows/build-mcp-bundle.yml b/.github/workflows/build-mcp-bundle.yml
index 001770a..add5fc7 100644
--- a/.github/workflows/build-mcp-bundle.yml
+++ b/.github/workflows/build-mcp-bundle.yml
@@ -29,7 +29,7 @@ jobs:
         run: ./scripts/build_mcp_bundle.sh
 
       - name: Upload artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: brainctl-mcp-${{ matrix.target }}
           path: dist/brainctl-mcp-${{ matrix.target }}
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index fa5dc7f..9b439fc 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -279,7 +279,7 @@ jobs:
 
       - name: Upload bench report artefacts
         if: steps.changes.outputs.retrieval == 'true' && always()
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02  # v4
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a  # v7.0.1
         with:
           name: bench-reports
           path: bench-reports/