diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 6f423100..f609fbd6 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -41,7 +41,7 @@ jobs:
           node-version: 22
       - run: sh native/noise/scripts/build-node.sh
       - run: cp native/noise/memnox-noise.*.node "memnox-noise.${{ matrix.target }}.node"
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@v7
         with:
           name: noise-${{ matrix.target }}
           path: memnox-noise.${{ matrix.target }}.node
diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
index 5bc64282..7dae5f67 100644
--- a/.github/workflows/security.yml
+++ b/.github/workflows/security.yml
@@ -97,7 +97,7 @@ jobs:
       # cannot read a pnpm store, so it reported every transitive dev dependency as
       # missing and exited 1. cdxgen reads `pnpm-lock.yaml` directly.
       - run: pnpm dlx @cyclonedx/cdxgen@11 -t pnpm -o sbom.json --no-recurse
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@v7
         with:
           name: sbom
           path: sbom.json