diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index bc9d1a036c..97ec16bdab 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -25,7 +25,7 @@ jobs:
       - name: build
         run: |
           scripts/build.sh -b ${{ matrix.buildtype }} -c ${{ matrix.compiler }} -x
-      - uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
+      - uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
         name: upload logs
         if: failure()
         with:
@@ -48,7 +48,7 @@ jobs:
       - name: build
         run: |
           scripts/build.sh -b ${{ matrix.buildtype }} -c ${{ matrix.compiler }} -x libnvme
-      - uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
+      - uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
         name: upload logs
         if: failure()
         with:
@@ -82,7 +82,7 @@ jobs:
             -w /build \
             ghcr.io/linux-nvme/ubuntu-cross-${{ matrix.arch }}:latest \
             sh -c "git config --global --add safe.directory /build && scripts/build.sh -b release -c gcc -t ${{ matrix.arch }} cross"
-      - uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
+      - uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
         name: upload logs
         if: failure()
         with:
@@ -103,7 +103,7 @@ jobs:
       - name: build
         run: |
           scripts/build.sh -b release -c gcc fallback
-      - uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
+      - uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
         if: failure()
         with:
           name: log files
diff --git a/.github/workflows/coverity.yml b/.github/workflows/coverity.yml
index 3bbcf764cd..e75268f9e2 100644
--- a/.github/workflows/coverity.yml
+++ b/.github/workflows/coverity.yml
@@ -67,7 +67,7 @@ jobs:
             --form description="Automated Coverity Scan from ${{ github.event_name }}" \
             https://scan.coverity.com/builds?project=linux-nvme%2Fnvme-cli
 
-      - uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
+      - uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
         name: upload coverity artifacts
         if: failure()
         with:
diff --git a/.github/workflows/libnvme-release-python.yml b/.github/workflows/libnvme-release-python.yml
index f6fec38fda..1393e1ca0b 100644
--- a/.github/workflows/libnvme-release-python.yml
+++ b/.github/workflows/libnvme-release-python.yml
@@ -35,7 +35,7 @@ jobs:
         run: |
           pipx run twine check dist/*.tar.gz
 
-      - uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
+      - uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
         with:
           path: dist/*.tar.gz
           retention-days: 5
@@ -93,7 +93,7 @@ jobs:
         run: |
           pipx run twine check dist/*.tar.gz
 
-      - uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
+      - uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
         with:
           name: test_pypi
           path: dist/*.tar.gz
diff --git a/.github/workflows/upload.yml b/.github/workflows/upload.yml
index 48cc75b02b..06f000f975 100644
--- a/.github/workflows/upload.yml
+++ b/.github/workflows/upload.yml
@@ -37,7 +37,7 @@ jobs:
             cp .build-ci/nvme "upload/nvme-cli-${VERSION}-x86_64"
           fi
 
-      - uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
+      - uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
         name: upload artifacts to github
         with:
           name: nvme-cli