diff --git a/.github/workflows/bandit.yml b/.github/workflows/bandit.yml
index e078015f..92732cfb 100644
--- a/.github/workflows/bandit.yml
+++ b/.github/workflows/bandit.yml
@@ -24,7 +24,7 @@ jobs:
         if: always()
         run: cat bandit-report.json
       - name: Upload Bandit Scan Artifact
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # pin@v7.0.0
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # pin@v7.0.1
         if: always()
         with:
           name: bandit-findings
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 065f4826..385d30f5 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -16,7 +16,7 @@ jobs:
       - run: make docs
       - if: ${{ github.ref_name != 'main' }}
         name: Upload as artifact
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # pin@v7.0.0
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # pin@v7.0.1
         with:
           name: docs
           path: _build/