diff --git a/.github/workflows/bandit.yml b/.github/workflows/bandit.yml
index eb0a5f5a..e078015f 100644
--- a/.github/workflows/bandit.yml
+++ b/.github/workflows/bandit.yml
@@ -24,7 +24,7 @@ jobs:
         if: always()
         run: cat bandit-report.json
       - name: Upload Bandit Scan Artifact
-        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # pin@v6.0.0
+        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # pin@v7.0.0
         if: always()
         with:
           name: bandit-findings
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 2537a754..065f4826 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -16,7 +16,7 @@ jobs:
       - run: make docs
       - if: ${{ github.ref_name != 'main' }}
         name: Upload as artifact
-        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # pin@v6.0.0
+        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # pin@v7.0.0
         with:
           name: docs
           path: _build/