diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 0248757cc..3cc645dd6 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -196,14 +196,14 @@ jobs:
 
       - name: Upload artifact (tar.gz)
         if: matrix.archive == 'tar.gz'
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
         with:
           name: socket-patch-${{ matrix.target }}
           path: socket-patch-${{ matrix.target }}.tar.gz
 
       - name: Upload artifact (zip)
         if: matrix.archive == 'zip'
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
         with:
           name: socket-patch-${{ matrix.target }}
           path: socket-patch-${{ matrix.target }}.zip
@@ -251,7 +251,7 @@ jobs:
       sums-digest: ${{ steps.sums.outputs.digest }}
     steps:
       - name: Download all artifacts
-        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
+        uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
         with:
           path: artifacts
           merge-multiple: true