diff --git a/.github/workflows/deploy-artifact.yml b/.github/workflows/deploy-artifact.yml
index 749d2ae..2df916b 100644
--- a/.github/workflows/deploy-artifact.yml
+++ b/.github/workflows/deploy-artifact.yml
@@ -95,7 +95,7 @@ jobs:
       # The lock is always consumed from deploy-dir/images.lock.json after download.
       - name: Download image lock artifact
         if: ${{ inputs.image-lock-artifact != '' }}
-        uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4.2.1
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           name: ${{ inputs.image-lock-artifact }}
           path: ${{ inputs.deploy-dir }}