diff --git a/.github/workflows/early-access.yml b/.github/workflows/early-access.yml
index d8b4f7c..a8db7a4 100644
--- a/.github/workflows/early-access.yml
+++ b/.github/workflows/early-access.yml
@@ -32,7 +32,7 @@ jobs:
 
     steps:
       - name: Download all build artifacts
-        uses: actions/download-artifact@v4.1.4
+        uses: actions/download-artifact@v4.1.7
 
       - name: Check out repository
         uses: actions/checkout@v4.1.4
@@ -120,7 +120,7 @@ jobs:
         run: git checkout ${{ steps.head.outputs.content }}
 
       - name: Download all build artifacts
-        uses: actions/download-artifact@v4.1.4
+        uses: actions/download-artifact@v4.1.7
         with:
           path: /tmp/artifacts
 
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 91c96f5..a62adc8 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -85,7 +85,7 @@ jobs:
 
     steps:
       - name: Download all build artifacts
-        uses: actions/download-artifact@v4.1.4
+        uses: actions/download-artifact@v4.1.7
 
       - name: Read HEAD ref
         id: head
@@ -171,7 +171,7 @@ jobs:
     steps:
       # must read HEAD before checkout
       - name: Download all build artifacts
-        uses: actions/download-artifact@v4.1.4
+        uses: actions/download-artifact@v4.1.7
 
       - name: Read HEAD ref
         id: head
@@ -202,7 +202,7 @@ jobs:
 
       # checkout will clobber downloaded artifacts; we have to download them again
       - name: Download all build artifacts
-        uses: actions/download-artifact@v4.1.4
+        uses: actions/download-artifact@v4.1.7
         with:
           path: /tmp/artifacts