diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 66b4cfe..32de01c 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -330,7 +330,7 @@ jobs:
           cat coverage/package-coverage-table.txt
       - name: Upload package coverage artifacts
         if: ${{ matrix.coverage && always() }}
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: package-coverage
           if-no-files-found: error
@@ -354,7 +354,7 @@ jobs:
           verbose: true
       - name: Upload allure results
         if: matrix.coverage
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: allure-results
           if-no-files-found: error
@@ -392,7 +392,7 @@ jobs:
         run: npm run pack:mcpb
       - name: Upload MCPB bundle artifact (main only)
         if: ${{ github.event_name == 'push' && github.ref == 'refs/heads/main' }}
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: safe-docx-mcpb
           if-no-files-found: error
diff --git a/.github/workflows/mcpb-smoke.yml b/.github/workflows/mcpb-smoke.yml
index 622ed46..efc1675 100644
--- a/.github/workflows/mcpb-smoke.yml
+++ b/.github/workflows/mcpb-smoke.yml
@@ -24,7 +24,7 @@ jobs:
       - name: Build and pack safe-docx MCP bundle
         run: npm run pack:mcpb
       - name: Upload MCPB smoke artifact
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: safe-docx-mcpb-smoke
           if-no-files-found: error