diff --git a/.github/workflows/update-flake.yml b/.github/workflows/update-flake.yml
index c829da4..89ceaa0 100644
--- a/.github/workflows/update-flake.yml
+++ b/.github/workflows/update-flake.yml
@@ -110,7 +110,7 @@ jobs:
             > "$RUNNER_TEMP/verdict.json"
           echo "unknown=$(jq '[.pins[] | select([.platforms[].status] | index("unknown"))] | length' "$RUNNER_TEMP/verdict.json")" >> "$GITHUB_OUTPUT"
       - name: Upload verdict
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7
         with:
           name: verdict
           path: ${{ runner.temp }}/verdict.json
@@ -148,7 +148,7 @@ jobs:
             .#pinned-sweep -- check --json --build-unknown \
             > "$RUNNER_TEMP/verdict-fallback.json"
       - name: Upload fallback verdict
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7
         with:
           name: verdict-fallback
           path: ${{ runner.temp }}/verdict-fallback.json
@@ -181,7 +181,7 @@ jobs:
         with:
           determinate: false
       - name: Download verdicts
-        uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4
+        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8
         continue-on-error: true
         with:
           pattern: verdict*