diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 9a4311912e..11bfa4fc9f 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -38,7 +38,7 @@ jobs:
           cd dist && echo "::set-output name=hashes::$(sha256sum * | base64 -w0)"
 
       - name: "Upload dists"
-        uses: "actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874"
+        uses: "actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882"
         with:
           name: "dist"
           path: "dist/"
diff --git a/.github/workflows/run-tests.yml b/.github/workflows/run-tests.yml
index 7dc5f89bc5..11cbcc66b6 100644
--- a/.github/workflows/run-tests.yml
+++ b/.github/workflows/run-tests.yml
@@ -53,7 +53,7 @@ jobs:
       run: |
         nox -s "test-${{ startsWith(matrix.python-version, 'pypy') && 'pypy' || matrix.python-version }}"
     - name: "Upload artifact"
-      uses: "actions/upload-artifact@0b7f8abb1508181956e8e162db84b466c27e18ce"
+      uses: "actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882"
       with:
         name: coverage-data
         path: ".coverage.*"
@@ -87,7 +87,7 @@ jobs:
           python -m coverage report --ignore-errors --show-missing --fail-under=77
 
       - name: "Upload report"
-        uses: actions/upload-artifact@0b7f8abb1508181956e8e162db84b466c27e18ce
+        uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882
         with:
           name: coverage-report
           path: htmlcov