diff --git a/.github/workflows/cli-bench.yml b/.github/workflows/cli-bench.yml
index 3e8bc30e9..47f54bb2f 100644
--- a/.github/workflows/cli-bench.yml
+++ b/.github/workflows/cli-bench.yml
@@ -40,7 +40,7 @@ jobs:
         run: node bench/run.ts --baseline ref:${{ github.event.pull_request.base.sha }} --suite startup --suite modules --suite footprint --out bench-report/report.md
 
       - name: ⏫ Upload report
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7
         with:
           name: cli-bench-report
           path: bench-report/
diff --git a/.github/workflows/size.yml b/.github/workflows/size.yml
index ffdb4f3d2..5030cc977 100644
--- a/.github/workflows/size.yml
+++ b/.github/workflows/size.yml
@@ -38,13 +38,13 @@ jobs:
 
       - parallel:
           - name: ⏫ Upload stats.json
-            uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+            uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7
             with:
               name: head-stats
               path: ./packages/*/stats.json
 
           - name: ⏫ Upload PR number
-            uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+            uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7
             with:
               name: pr-number
               path: pr-number.txt
@@ -69,7 +69,7 @@ jobs:
         run: pnpm build
 
       - name: ⏫ Upload stats.json
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7
         with:
           name: base-stats
           path: ./packages/*/stats.json