diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 96bb45728..f10dc4211 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -36,7 +36,7 @@ jobs:
           [[ "$PACKAGE_RUN" =~ ^[0-9]+$ ]] || exit 1
           gh api "repos/$GITHUB_REPOSITORY/actions/runs/$PACKAGE_RUN" > "$RUNNER_TEMP/package-run.json"
           python3 tools/check-release-prerequisites.py
-      - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
+      - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
         with:
           name: UNSIGNED-NOT-FOR-INSTALLATION
           path: ${{ runner.temp }}/verified-package