diff --git a/.github/workflows/ci-pr.yml b/.github/workflows/ci-pr.yml
index 91961ff..0a08083 100644
--- a/.github/workflows/ci-pr.yml
+++ b/.github/workflows/ci-pr.yml
@@ -36,7 +36,7 @@ jobs:
 
       # Upload XMLs ONLY once (Java 21) so the report doesn't double-count
       - name: Upload unit test XMLs (Java 21 only)
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         if: always() && matrix.java == '21'
         with:
           name: unit-xml
@@ -72,7 +72,7 @@ jobs:
 
       # Upload XMLs ONLY once (Java 21) so the report doesn't double-count
       - name: Upload IT test XMLs (Java 21 only)
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         if: always() && matrix.java == '21'
         with:
           name: it-xml
diff --git a/.github/workflows/ci-push.yml b/.github/workflows/ci-push.yml
index ddd4e2a..5f75872 100644
--- a/.github/workflows/ci-push.yml
+++ b/.github/workflows/ci-push.yml
@@ -34,7 +34,7 @@ jobs:
         run: mvn -B clean verify -Pqa -Ddependency-check.skip=true
 
       - name: Upload unit test XMLs
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         if: always()
         with:
           name: unit-xml-java-${{ matrix.java }}
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 8867b33..eb05b9c 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -150,7 +150,7 @@ jobs:
         run: mvn -B cyclonedx:makeAggregateBom -Pqa
 
       - name: Upload SBOM artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         with:
           name: sbom
           path: target/bom.*