diff --git a/.github/workflows/continuous-integration.yml b/.github/workflows/continuous-integration.yml
index 02364f52..175ffbc1 100644
--- a/.github/workflows/continuous-integration.yml
+++ b/.github/workflows/continuous-integration.yml
@@ -60,7 +60,7 @@ jobs:
         with:
           disable-sudo: true
           egress-policy: audit
-      - uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
+      - uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
         with:
           merge-multiple: true
           pattern: test-results-*
diff --git a/.github/workflows/release-build.yml b/.github/workflows/release-build.yml
index 1d028aa5..1f1259a4 100644
--- a/.github/workflows/release-build.yml
+++ b/.github/workflows/release-build.yml
@@ -161,7 +161,7 @@ jobs:
         with:
           disable-sudo: true
           egress-policy: audit
-      - uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
+      - uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
         with:
           pattern: documents
       - name: Upload documents to release
diff --git a/.github/workflows/wc-build-push.yml b/.github/workflows/wc-build-push.yml
index ccf29a80..c156ea87 100644
--- a/.github/workflows/wc-build-push.yml
+++ b/.github/workflows/wc-build-push.yml
@@ -155,7 +155,7 @@ jobs:
         with:
           disable-sudo: true
           egress-policy: audit
-      - uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
+      - uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
         with:
           path: ${{ runner.temp }}/digests
           pattern: digests-${{ needs.sanitize-image-name.outputs.image-basename }}-*