diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 4c52f4d..c6bb988 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -67,7 +67,7 @@ jobs:
           docker run --rm shabbat-archive-ci php bin/self-check.php --release
           docker run --rm shabbat-archive-ci php bin/igbinary-check.php
           docker run --rm -e EXPECTED_COMMIT shabbat-archive-ci php -r '$m=json_decode(file_get_contents("/app/build-info.json"),true,flags:JSON_THROW_ON_ERROR); if ($m["commit"]!==getenv("EXPECTED_COMMIT") || $m["local_changes"]!==false) { exit(1); } echo "Archive identity retained.\n";'
-      - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02
+      - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9
         if: matrix.php == '8.4'
         with:
           name: release-archives-${{ github.sha }}
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 23be28c..9990300 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -38,7 +38,7 @@ jobs:
       - run: docker run --rm shabbat-release php bin/igbinary-check.php
       - run: python3 tests/release_packaging_test.py
       - run: composer package
-      - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02
+      - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9
         with:
           name: reviewed-release-archives
           path: dist/