diff --git a/.github/workflows/setup.yml b/.github/workflows/setup.yml
index db24151..3eaa2ea 100644
--- a/.github/workflows/setup.yml
+++ b/.github/workflows/setup.yml
@@ -84,7 +84,7 @@ jobs:
     - uses: astral-sh/setup-uv@2ddd2b9cb38ad8efd50337e8ab201519a34c9f24 # v7.1.1
       with:
         version: 0.9.5
-    - uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+    - uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
       with:
         path: dist
         merge-multiple: true
@@ -99,7 +99,7 @@ jobs:
       # this permission is mandatory for trusted publishing
       id-token: write
     steps:
-    - uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+    - uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
       with:
         path: dist
         merge-multiple: true