diff --git a/.github/workflows/deps.yml b/.github/workflows/deps.yml
index 5a3525dc1..92d691d0e 100644
--- a/.github/workflows/deps.yml
+++ b/.github/workflows/deps.yml
@@ -36,7 +36,7 @@ jobs:
 
       - name: Upload audit report
         if: always()
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v4
         with:
           name: npm-audit-report
           path: audit-report.json
diff --git a/.github/workflows/package.yml b/.github/workflows/package.yml
index c8edf8831..621e76818 100644
--- a/.github/workflows/package.yml
+++ b/.github/workflows/package.yml
@@ -70,7 +70,7 @@ jobs:
           ls -lh *.vsix
 
       - name: Upload VSIX artifact
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v4
         with:
           name: vscode-deepnote-${{ steps.package-version.outputs.version }}-${{ steps.branch-name.outputs.branch }}
           path: vscode-deepnote-*.vsix