diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index c63899c..25c4e34 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -25,7 +25,7 @@ jobs:
             - name: Build the vsix
               run: npx vsce package -o weaudit.vsix
 
-            - uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
+            - uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
               with:
                   name: weaudit
                   path: weaudit.vsix
@@ -37,7 +37,7 @@ jobs:
         permissions:
             contents: write
         steps:
-            - uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
+            - uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
               with:
                   name: weaudit
 
@@ -51,7 +51,7 @@ jobs:
         needs: build
         if: success()
         steps:
-            - uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
+            - uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
               with:
                   name: weaudit