diff --git a/.github/workflows/pypi-publish.yml b/.github/workflows/pypi-publish.yml
index 9f4611ae2918..f8ff56ebce17 100644
--- a/.github/workflows/pypi-publish.yml
+++ b/.github/workflows/pypi-publish.yml
@@ -54,7 +54,7 @@ jobs:
           enable-cache: false
         timeout-minutes: 3
 
-      - uses: dawidd6/action-download-artifact@27e4ae67c24b67d3b54bc6d6a45475be1e28031b # v26
+      - uses: dawidd6/action-download-artifact@eab87c9830c39eff17e5a6eadb20bfb4bc880477 # v27
         with:
           path: tmpdist/
           run_id: ${{ github.event.inputs.run_id || github.event.workflow_run.id }}
diff --git a/.github/workflows/wheel-builder.yml b/.github/workflows/wheel-builder.yml
index 6e8c97b82d3f..2244d9a2e664 100644
--- a/.github/workflows/wheel-builder.yml
+++ b/.github/workflows/wheel-builder.yml
@@ -217,7 +217,7 @@ jobs:
           python-version: ${{ matrix.PYTHON.VERSION }}
           enable-cache: false
         timeout-minutes: 3
-      - uses: dawidd6/action-download-artifact@27e4ae67c24b67d3b54bc6d6a45475be1e28031b # v26
+      - uses: dawidd6/action-download-artifact@eab87c9830c39eff17e5a6eadb20bfb4bc880477 # v27
         with:
           repo: pyca/infra
           workflow: build-macos-openssl.yml