diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 1675400..77d474b 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -30,7 +30,7 @@ jobs:
           echo ${{ github.event.pull_request.head.sha }} > ./pr/sha
 
       - name: Upload PR metadata
-        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
+        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
         with:
           name: pr-metadata
           path: pr/
@@ -109,7 +109,7 @@ jobs:
 
       - name: Prepare build reports
         if: always()
-        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
+        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
         with:
           name: build-reports-java${{ matrix.java }}-${{ github.run_attempt }}
           path: |
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 68228e1..b8a385a 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -119,7 +119,7 @@ jobs:
       # Persist logs
       - name: JReleaser release output
         if: always()
-        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
+        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
         with:
           name: jreleaser-release
           path: |