diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 8efa060..3ddfb75 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -169,7 +169,7 @@ jobs:
         run: node scripts/verify-release.mjs
 
       - name: Download the sole release TGZ
-        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           name: release-candidate-tgz
           path: dist-release
@@ -206,7 +206,7 @@ jobs:
         run: pnpm install --frozen-lockfile
 
       - name: Download the sole release TGZ
-        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           name: release-candidate-tgz
           path: dist-release