diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 64c29f4..0ce6b78 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -46,7 +46,7 @@ jobs:
             console.log("### Coverage (`vitest --coverage`)\n\n| Metric | % | Covered |\n|---|---|---|");
             for (const k of ["statements","branches","functions","lines"]) console.log(row(k));
           ' >> "$GITHUB_STEP_SUMMARY"
-      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+      - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         if: always()
         with:
           name: coverage-${{ github.sha }}
@@ -97,7 +97,7 @@ jobs:
             echo "dist/ is up to date"
             echo "changed=false" >> "$GITHUB_OUTPUT"
           fi
-      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+      - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         if: steps.drift.outputs.changed == 'true'
         with:
           name: repacked-dist-${{ github.event.pull_request.head.sha }}