diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index e5e82e4..77af1e2 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -93,7 +93,7 @@ jobs:
     needs: build
     if: success() && inputs.deploy_type == 'prerelease'
     steps:
-      - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4
+      - uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e # v4.1.7
       - name: Publish Prerelease to Marketplace
         run: npx vsce publish --pre-release --no-git-tag-version --packagePath $(find . -iname *.vsix)
         env:
@@ -105,7 +105,7 @@ jobs:
     needs: build
     if: success() && inputs.deploy_type == 'stable'
     steps:
-      - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4
+      - uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e # v4.1.7
       - name: Publish Stable to Marketplace
         run: npx vsce publish --no-git-tag-version --packagePath $(find . -iname *.vsix)
         env:
@@ -117,7 +117,7 @@ jobs:
     needs: build
     if: success() && inputs.deploy_type == 'stable'
     steps:
-      - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4
+      - uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e # v4.1.7
       - name: Publish Stable to OpenVSX
         run: npx ovsx publish --packagePath $(find . -iname *.vsix)
         env: