diff --git a/.github/workflows/_build_docker.yaml b/.github/workflows/_build_docker.yaml
index 20faa3c14..7b1373723 100644
--- a/.github/workflows/_build_docker.yaml
+++ b/.github/workflows/_build_docker.yaml
@@ -38,7 +38,7 @@ jobs:
         python-version: '3.11'
 
     - name: Download artifact
-      uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e # v4.1.7
+      uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4.2.1
       with:
         name: ${{ inputs.artifact-name }}
         path: dist
diff --git a/.github/workflows/_deploy-github-pages.yaml b/.github/workflows/_deploy-github-pages.yaml
index 7e6c397fd..ce4a89f0d 100644
--- a/.github/workflows/_deploy-github-pages.yaml
+++ b/.github/workflows/_deploy-github-pages.yaml
@@ -35,7 +35,7 @@ jobs:
         fetch-depth: 0
 
     - name: Download artifact
-      uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e # v4.1.7
+      uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4.2.1
       with:
         name: ${{ inputs.artifact-name }}
         path: dist
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 9702ce5f4..0977ee5cb 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -131,7 +131,7 @@ jobs:
         } >> "$GITHUB_OUTPUT"
 
     - name: Download artifact
-      uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e # v4.1.7
+      uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4.2.1
       with:
         name: ${{ env.ARTIFACT_NAME }}
         path: dist
@@ -310,7 +310,7 @@ jobs:
   #       fetch-depth: 0
 
   #   - name: Download provenance
-  #     uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e # v4.1.7
+  #     uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4.2.1
   #     with:
   #       name: ${{ needs.provenance.outputs.provenance-name }}