diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index eaf8161..3d46012 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -49,7 +49,7 @@ jobs:
         node-version: '18.x'
         registry-url: 'https://registry.npmjs.org'
     - name: Download math result from prepare job
-      uses: actions/download-artifact@v2
+      uses: actions/download-artifact@v4.1.7
       with:
         name: package
         path: package
@@ -76,7 +76,7 @@ jobs:
         # Defaults to the user or organization that owns the workflow file
         scope: '@wabarc'
     - name: Download math result from prepare job
-      uses: actions/download-artifact@v2
+      uses: actions/download-artifact@v4.1.7
       with:
         name: package
         path: package
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 31bb0ed..23f1f9a 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -67,7 +67,7 @@ jobs:
         fetch-depth: 0
 
     - name: Download math result from build and checksum jobs
-      uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
+      uses: actions/download-artifact@v4.1.7 # v3.0.2
       with:
         name: ${{ env.PRODUCT }}
         path: ${{ env.PRODUCT }}
@@ -110,7 +110,7 @@ jobs:
     needs: [release]
     steps:
     - name: Download artifact
-      uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
+      uses: actions/download-artifact@v4.1.7 # v3.0.2
       with:
         name: release-note
         path: .