diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 770afbd33..259fc1fab 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -458,7 +458,7 @@ jobs:
       packages: write
       id-token: write
     steps:
-      - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
+      - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
         with:
           name: public-release-source-candidate-${{ inputs.version }}
           path: ${{ runner.temp }}/release-artifacts
@@ -512,7 +512,7 @@ jobs:
       packages: write
       id-token: write
     steps:
-      - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
+      - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
         with:
           name: public-release-source-candidate-${{ inputs.version }}
           path: ${{ runner.temp }}/release-artifacts
@@ -703,7 +703,7 @@ jobs:
         with:
           node-version: 22.23.0
 
-      - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
+      - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
         with:
           name: public-release-source-candidate-${{ inputs.version }}
           path: ${{ runner.temp }}/release-artifacts