diff --git a/.github/workflows/findbugs.yml b/.github/workflows/findbugs.yml
index becdd32b..a265e72c 100644
--- a/.github/workflows/findbugs.yml
+++ b/.github/workflows/findbugs.yml
@@ -32,7 +32,7 @@ jobs:
     - name: Generate report
       run: mvn spotbugs:spotbugs
     - name: Upload FindBugs report as a workflow artifact
-      uses: actions/upload-artifact@c7d193f32edcb7bfad88892161225aeda64e9392
+      uses: actions/upload-artifact@26f96dfa697d77e81fd5907df203aa23a56210a8
       with:
         name: findbugs-report
         path: target/spotbugsXml.xml
diff --git a/.github/workflows/publish-release.yml b/.github/workflows/publish-release.yml
index b1de4db7..6ecd0db8 100644
--- a/.github/workflows/publish-release.yml
+++ b/.github/workflows/publish-release.yml
@@ -50,7 +50,7 @@ jobs:
           echo "version=lpvs-${VERSION:1}.jar" >> "$GITHUB_OUTPUT"
 
       - name: Upload build artifacts
-        uses: actions/upload-artifact@c7d193f32edcb7bfad88892161225aeda64e9392 # tag=v3
+        uses: actions/upload-artifact@26f96dfa697d77e81fd5907df203aa23a56210a8 # tag=v3
         with:
           name: ${{ steps.lpvs_version.outputs.version }}
           path: ./target/${{ steps.lpvs_version.outputs.version }}
diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml
index b278f017..e0dc78dd 100644
--- a/.github/workflows/scorecards.yml
+++ b/.github/workflows/scorecards.yml
@@ -64,7 +64,7 @@ jobs:
       # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
       # format to the repository Actions tab.
       - name: "Upload artifact"
-        uses: actions/upload-artifact@c7d193f32edcb7bfad88892161225aeda64e9392 # v4.0.0
+        uses: actions/upload-artifact@26f96dfa697d77e81fd5907df203aa23a56210a8 # v4.3.0
         with:
           name: SARIF file
           path: results.sarif
diff --git a/.github/workflows/test-suite.yml b/.github/workflows/test-suite.yml
index be25e852..99dd4edd 100644
--- a/.github/workflows/test-suite.yml
+++ b/.github/workflows/test-suite.yml
@@ -40,7 +40,7 @@ jobs:
       run: |
         echo "coverage = ${{ steps.jacoco.outputs.coverage }}"
     - name: Upload JaCoCo coverage report as a workflow artifact
-      uses: actions/upload-artifact@c7d193f32edcb7bfad88892161225aeda64e9392
+      uses: actions/upload-artifact@26f96dfa697d77e81fd5907df203aa23a56210a8
       with:
         name: jacoco-report
         path: target/site/jacoco/