diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index df9422f..e5976c8 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -65,7 +65,7 @@ jobs:
           CIBW_ARCHS: ${{ matrix.cibw-archs }}
 
       - name: Upload wheel artifacts
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
         with:
           name: dist-wheels-${{ matrix.os }}-${{ matrix.cibw-archs }}
           path: wheelhouse/*.whl
@@ -95,7 +95,7 @@ jobs:
         run: python -m build --sdist --outdir dist
 
       - name: Upload sdist artifact
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
         with:
           name: dist-sdist
           path: dist/*.tar.gz
@@ -134,7 +134,7 @@ jobs:
           python tools/artifacts.py dist --repo-root . --require-pypi-metadata
 
       - name: Upload validated distribution artifacts
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
         with:
           name: python-distributions
           path: dist/*
@@ -157,7 +157,7 @@ jobs:
           path: dist
 
       - name: Publish distribution artifacts
-        uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e # release/v1
+        uses: pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b # release/v1
         with:
           packages-dir: dist/
           repository-url: ${{ github.event_name == 'workflow_dispatch' && 'https://test.pypi.org/legacy/' || 'https://upload.pypi.org/legacy/' }}