diff --git a/.github/workflows/benchmark.yml b/.github/workflows/benchmark.yml
index aa9fe60..3b1cc6e 100644
--- a/.github/workflows/benchmark.yml
+++ b/.github/workflows/benchmark.yml
@@ -27,7 +27,7 @@ jobs:
           cache-dependency-path: pnpm-lock.yaml
       - run: pnpm install --frozen-lockfile
       - run: pnpm run benchmark:ci
-      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+      - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: bidilens-benchmark-${{ github.sha }}
           path: benchmarks/results/latest.json
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 04e31fa..fd5ce12 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -117,7 +117,7 @@ jobs:
         env:
           BIDILENS_MARKDOWN_IT_REPORT_DIR: markdown-it-compat-reports
       - if: ${{ failure() }}
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: markdown-it-compat-reports
           path: markdown-it-compat-reports
@@ -157,7 +157,7 @@ jobs:
           ./android/gradlew -p android/consumer-smoke
           clean assembleDebug
           --stacktrace --console=plain
-      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+      - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: bidilens-android-artifacts
           path: |
@@ -196,7 +196,7 @@ jobs:
           script: bash scripts/check-android-ui.sh
       - name: Retain Android UI reports and failure diagnostics
         if: ${{ !cancelled() }}
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: android-ui-reports
           path: |
@@ -308,7 +308,7 @@ jobs:
       - run: pnpm run deps:audit
       - run: pnpm run sbom
       - run: pnpm run sbom:check
-      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+      - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: bidilens-cyclonedx-sbom
           path: bidilens-sbom.cdx.json
@@ -338,7 +338,7 @@ jobs:
       - run: pnpm exec playwright install --with-deps ${{ matrix.browser }}
       - run: pnpm run build:visual-fixtures
       - run: pnpm exec playwright test --project=${{ matrix.browser }}
-      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+      - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         if: failure()
         with:
           name: playwright-${{ matrix.browser }}-failure
diff --git a/.github/workflows/publish-android.yml b/.github/workflows/publish-android.yml
index a1c47af..fa36142 100644
--- a/.github/workflows/publish-android.yml
+++ b/.github/workflows/publish-android.yml
@@ -157,7 +157,7 @@ jobs:
             --stacktrace --console=plain
       - name: Retain exact signed release inputs
         if: always()
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: bidilens-android-maven-${{ inputs.version }}
           path: |
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index aa4daa3..98f4347 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -58,7 +58,7 @@ jobs:
           BIDILENS_RELEASE_AUTHENTICATION: trusted-publishing
       - name: Retain exact release artifacts and checksums
         if: always() && steps.publish-packages.outcome != 'skipped'
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: bidilens-npm-${{ inputs.version }}
           path: npm-release-artifacts/
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index c582437..437055f 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -35,7 +35,7 @@ jobs:
       - run: pnpm run release:check
       - run: pnpm run sbom
       - run: pnpm run sbom:check
-      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+      - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: bidilens-release-preparation
           path: bidilens-sbom.cdx.json