diff --git a/.github/actions/analyze-comment/action.yml b/.github/actions/analyze-comment/action.yml
index 90edbc7ee2..3f30c3f60c 100644
--- a/.github/actions/analyze-comment/action.yml
+++ b/.github/actions/analyze-comment/action.yml
@@ -10,7 +10,7 @@ runs:
   steps:
     - name: Download PR bundle stats
       if: github.event.workflow_run.id
-      uses: dawidd6/action-download-artifact@v7
+      uses: dawidd6/action-download-artifact@ea71f332a90fd52416b1629b933dcf7e0ccd421d # v2.22.0
       with:
         workflow: build-fork.yml
         run_id: ${{ github.event.workflow_run.id }}
@@ -24,13 +24,13 @@ runs:
 
     - name: Upload bundle
       if: github.event_name == 'push'
-      uses: actions/upload-artifact@v4.5.0
+      uses: actions/upload-artifact@6673cd052c4cd6fcf4b4e6e60ea986c889389535 # v3.0.0
       with:
         name: bundle
         path: .next/analyze/__bundle_analysis.json
 
     - name: Download base branch bundle stats
-      uses: dawidd6/action-download-artifact@v7
+      uses: dawidd6/action-download-artifact@ea71f332a90fd52416b1629b933dcf7e0ccd421d # v2.22.0
       if: github.event_name != 'push'
       with:
         workflow: build-test-deploy.yml
diff --git a/.github/actions/cypress/action.yml b/.github/actions/cypress/action.yml
index 57102ab4ec..fd296972d9 100644
--- a/.github/actions/cypress/action.yml
+++ b/.github/actions/cypress/action.yml
@@ -29,14 +29,14 @@ runs:
 
     - name: download build
       if: github.event_name != 'workflow_run'
-      uses: actions/download-artifact@v4.1.8
+      uses: actions/download-artifact@fb598a63ae348fa914e94cd0ff38f362e927b741 # v3.0.0
       with:
         name: out
         path: out
 
     - name: Download static build
       if: github.event_name == 'workflow_run'
-      uses: dawidd6/action-download-artifact@v7
+      uses: dawidd6/action-download-artifact@ea71f332a90fd52416b1629b933dcf7e0ccd421d # v2.22.0
       with:
         workflow: build-fork.yml
         run_id: ${{ github.event.workflow_run.id }}
@@ -60,7 +60,7 @@ runs:
         CYPRESS_TENDERLY_PROJECT: ${{ inputs.CYPRESS_TENDERLY_PROJECT }}
 
     - name: upload screenshots
-      uses: actions/upload-artifact@v4.5.0
+      uses: actions/upload-artifact@6673cd052c4cd6fcf4b4e6e60ea986c889389535 # v3.0.0
       if: failure()
       with:
         name: cypress-fail-screenshots-${{ github.job }}-${{ matrix.market }}
diff --git a/.github/actions/upload-artifacts/action.yml b/.github/actions/upload-artifacts/action.yml
index 7a9556cc34..5ff294a09d 100644
--- a/.github/actions/upload-artifacts/action.yml
+++ b/.github/actions/upload-artifacts/action.yml
@@ -24,23 +24,26 @@ runs:
         echo ${{ github.event.number }} > ./__pr/NUM
     - name: store PR info
       if: github.event.number && inputs.PR_INFO == 'true'
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@6673cd052c4cd6fcf4b4e6e60ea986c889389535 # v3.0.0
       with:
         name: pr
         path: __pr/
-        retention-days: 15
+        retention-days: 10
+        overwrite: true
     - name: store static build
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@6673cd052c4cd6fcf4b4e6e60ea986c889389535 # v3.0.0
       with:
         name: '${{ inputs.BUILD_ARTIFACT_NAME }}'
         path: out/
-        retention-days: 15
+        retention-days: 10
+        overwrite: true
     - name: store nextjs build
       if: inputs.NEXTJS_BUILD == 'true'
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@6673cd052c4cd6fcf4b4e6e60ea986c889389535 # v3.0.0
       with:
         name: 'nextjs_${{ github.job }}'
         path: |
           .next
           !.next/cache
-        retention-days: 15
+        retention-days: 10
+        overwrite: true
diff --git a/.github/workflows/build-test-deploy-dev.yml b/.github/workflows/build-test-deploy-dev.yml
index da80830bae..33bfb13e05 100644
--- a/.github/workflows/build-test-deploy-dev.yml
+++ b/.github/workflows/build-test-deploy-dev.yml
@@ -93,7 +93,7 @@ jobs:
       - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # v3.0.2
 
       - name: download build
-        uses: actions/download-artifact@v4.1.8 # v3.0.0
+        uses: actions/download-artifact@fb598a63ae348fa914e94cd0ff38f362e927b741 # v3.0.0
         with:
           name: nextjs_build
           path: .next
@@ -111,7 +111,7 @@ jobs:
       - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # v3.0.2
 
       - name: download build
-        uses: actions/download-artifact@v4.1.8 # v3.0.0
+        uses: actions/download-artifact@fb598a63ae348fa914e94cd0ff38f362e927b741 # v3.0.0
         with:
           name: out
           path: out