diff --git a/.github/actions/ci-incr-build-cache-save/action.yml b/.github/actions/ci-incr-build-cache-save/action.yml
index 7324a7de922..10db8b2c828 100644
--- a/.github/actions/ci-incr-build-cache-save/action.yml
+++ b/.github/actions/ci-incr-build-cache-save/action.yml
@@ -46,7 +46,7 @@ runs:
           echo "::endgroup::"
         fi
     - name: Archive code-checks incremental
-      uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4
+      uses: actions/upload-artifact@604373da6381bf24206979c74d06a550515601b9 # v4
       with:
         name: ci-gradle-caches-${{ inputs.job-name }}-${{ inputs.java-version }}
         path: ~/ci-gradle-caches-${{ inputs.job-name }}-${{ inputs.java-version }}.tar
diff --git a/.github/workflows/ci-mac.yml b/.github/workflows/ci-mac.yml
index b2f7572d28d..a5da7ce7c8d 100644
--- a/.github/workflows/ci-mac.yml
+++ b/.github/workflows/ci-mac.yml
@@ -70,7 +70,7 @@ jobs:
       run: ./gradlew test --scan
 
     - name: Capture Test Reports
-      uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4
+      uses: actions/upload-artifact@604373da6381bf24206979c74d06a550515601b9 # v4
       if: ${{ failure() }}
       with:
         name: test-results
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index eef6e80ec26..c4c7566f3f3 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -128,7 +128,7 @@ jobs:
         run: ./gradlew test :nessie-client:check -x :nessie-client:intTest -x :nessie-quarkus:test -x :nessie-server-admin-tool:test -x :nessie-events-quarkus:test -x :nessie-events-ri:test --scan
 
       - name: Capture Test Reports
-        uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4
+        uses: actions/upload-artifact@604373da6381bf24206979c74d06a550515601b9 # v4
         if: ${{ failure() }}
         with:
           name: ci-test-reports
@@ -188,7 +188,7 @@ jobs:
           done
 
       - name: Capture Test Reports
-        uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4
+        uses: actions/upload-artifact@604373da6381bf24206979c74d06a550515601b9 # v4
         if: ${{ failure() }}
         with:
           name: ci-test-quarkus-reports
@@ -244,7 +244,7 @@ jobs:
             --scan
 
       - name: Capture Test Reports
-        uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4
+        uses: actions/upload-artifact@604373da6381bf24206979c74d06a550515601b9 # v4
         if: ${{ failure() }}
         with:
           name: ci-inttest-reports
@@ -286,7 +286,7 @@ jobs:
           ./gradlew $(cat ../persist-prjs.txt) $(cat ../storage-prjs.txt) --scan
 
       - name: Capture Test Reports
-        uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4
+        uses: actions/upload-artifact@604373da6381bf24206979c74d06a550515601b9 # v4
         if: ${{ failure() }}
         with:
           name: ci-inttest-stores-reports
@@ -329,7 +329,7 @@ jobs:
           ./gradlew $(cat ../spark-prjs.txt) --scan
 
       - name: Capture Test Reports
-        uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4
+        uses: actions/upload-artifact@604373da6381bf24206979c74d06a550515601b9 # v4
         if: ${{ failure() }}
         with:
           name: ci-inttest-integrations-reports
@@ -375,7 +375,7 @@ jobs:
           done
 
       - name: Capture Test Reports
-        uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4
+        uses: actions/upload-artifact@604373da6381bf24206979c74d06a550515601b9 # v4
         if: ${{ failure() }}
         with:
           name: ci-inttest-quarkus-server-reports
@@ -422,7 +422,7 @@ jobs:
           done
 
       - name: Capture Test Reports
-        uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4
+        uses: actions/upload-artifact@604373da6381bf24206979c74d06a550515601b9 # v4
         if: ${{ failure() }}
         with:
           name: ci-inttest-quarkus-tool-reports
@@ -469,7 +469,7 @@ jobs:
           done
 
       - name: Capture Test Reports
-        uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4
+        uses: actions/upload-artifact@604373da6381bf24206979c74d06a550515601b9 # v4
         if: ${{ failure() }}
         with:
           name: ci-inttest-quarkus-events-reports
diff --git a/.github/workflows/release-publish.yml b/.github/workflows/release-publish.yml
index 2cad39c0905..7bc00c51241 100644
--- a/.github/workflows/release-publish.yml
+++ b/.github/workflows/release-publish.yml
@@ -149,7 +149,7 @@ jobs:
           cp tools/aggregated-license-report/build/distributions/nessie-aggregated-license-report-${RELEASE_VERSION}.zip "${ARTIFACTS}"
 
       - name: Archive release artifacts
-        uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4
+        uses: actions/upload-artifact@604373da6381bf24206979c74d06a550515601b9 # v4
         with:
           name: nessie-release-artifacts
           path: build-artifacts
@@ -270,7 +270,7 @@ jobs:
           gh api -X PUT /repos/projectnessie/charts.projectnessie.org/contents/index.yaml -f message="Publishing Nessie Helm chart ${RELEASE_VERSION}" -f content=$(base64 -w0 index.yaml) -f sha=${index_sha} || true
 
       - name: Archive Helm chart artifact
-        uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4
+        uses: actions/upload-artifact@604373da6381bf24206979c74d06a550515601b9 # v4
         with:
           name: nessie-release-helm
           path: ./nessie-helm-*.tgz
@@ -310,7 +310,7 @@ jobs:
         run: cp api/model/build/generated/openapi/META-INF/openapi/openapi.yaml ./nessie-openapi-${RELEASE_VERSION}.yaml
 
       - name: Archive OpenAPI artifact
-        uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4
+        uses: actions/upload-artifact@604373da6381bf24206979c74d06a550515601b9 # v4
         with:
           name: nessie-release-openapi
           path: ./nessie-openapi-*.yaml