diff --git a/.github/actions/build-docker-images/action.yml b/.github/actions/build-docker-images/action.yml
index a988d0a9b37..de003764737 100644
--- a/.github/actions/build-docker-images/action.yml
+++ b/.github/actions/build-docker-images/action.yml
@@ -85,7 +85,7 @@ runs:
 
     - name: Upload artifact
       if: ${{ (success() || failure()) && inputs.hash-graph == 'true' }}
-      uses: actions/upload-artifact@604373da6381bf24206979c74d06a550515601b9 # v4.4.1
+      uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3
       with:
         name: hash-graph
         path: /tmp/hash-graph.tar
@@ -110,7 +110,7 @@ runs:
 
     - name: Upload artifact
       if: ${{ (success() || failure()) && inputs.hash-ai-worker-ts == 'true' }}
-      uses: actions/upload-artifact@604373da6381bf24206979c74d06a550515601b9 # v4.4.1
+      uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3
       with:
         name: hash-ai-worker-ts
         path: /tmp/hash-ai-worker-ts.tar
@@ -135,7 +135,7 @@ runs:
 
     - name: Upload artifact
       if: ${{ (success() || failure()) && inputs.hash-integration-worker == 'true' }}
-      uses: actions/upload-artifact@604373da6381bf24206979c74d06a550515601b9 # v4.4.1
+      uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3
       with:
         name: hash-integration-worker
         path: /tmp/hash-integration-worker.tar
@@ -160,7 +160,7 @@ runs:
 
     - name: Upload artifact
       if: ${{ (success() || failure()) && inputs.hash-api == 'true' }}
-      uses: actions/upload-artifact@604373da6381bf24206979c74d06a550515601b9 # v4.4.1
+      uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3
       with:
         name: hash-api
         path: /tmp/hash-api.tar
diff --git a/.github/workflows/bench.yml b/.github/workflows/bench.yml
index 7dabd189aa1..35dc52fd67e 100644
--- a/.github/workflows/bench.yml
+++ b/.github/workflows/bench.yml
@@ -194,7 +194,7 @@ jobs:
 
       - name: Upload benchmark summary
         if: steps.benches.outputs.create-baseline == 'true'
-        uses: actions/upload-artifact@604373da6381bf24206979c74d06a550515601b9 # v4.4.1
+        uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3
         with:
           name: ${{ env.TRIMMED_PACKAGE_NAME }}_${{ github.job }}
           path: /tmp/${{ env.TRIMMED_PACKAGE_NAME }}.md
@@ -365,7 +365,7 @@ jobs:
 
       - name: Upload benchmark summary
         if: steps.benches.outputs.create-baseline == 'true'
-        uses: actions/upload-artifact@604373da6381bf24206979c74d06a550515601b9 # v4.4.1
+        uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3
         with:
           name: ${{ env.TRIMMED_PACKAGE_NAME }}_${{ github.job }}
           path: /tmp/${{ env.TRIMMED_PACKAGE_NAME }}.md
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 6eb7957b1e6..db81248068f 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -351,13 +351,13 @@ jobs:
 
       - name: Upload artifact playwright-report
         if: matrix.package == '@tests/hash-playwright' && success() || failure()
-        uses: actions/upload-artifact@604373da6381bf24206979c74d06a550515601b9 # v4.4.1
+        uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3
         with:
           name: ${{ env.TRIMMED_PACKAGE_NAME }}-report
           path: tests/hash-playwright/playwright-report
 
       - name: Upload logs
-        uses: actions/upload-artifact@604373da6381bf24206979c74d06a550515601b9 # v4.4.1
+        uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3
         if: success() || failure()
         with:
           name: ${{ env.TRIMMED_PACKAGE_NAME }}-logs