diff --git a/.github/workflows/generate-sbom.yml b/.github/workflows/generate-sbom.yml
index 987f154..4be0d74 100644
--- a/.github/workflows/generate-sbom.yml
+++ b/.github/workflows/generate-sbom.yml
@@ -28,7 +28,7 @@ jobs:
       - name: Generate sbom
         run: cyclonedx-py poetry --with main,app -o otterdog-bom.json
       - name: Upload sbom
-        uses: actions/upload-artifact@834a144ee995460fba8ed112a2fc961b36a5ec5a # v4.3.6
+        uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3
         with:
           name: otterdog-bom.json
           path: otterdog-bom.json
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index d776510..a6c4df9 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -101,7 +101,7 @@ jobs:
           cd dist && echo "hashes=$(sha256sum * | base64 -w0)" >> $GITHUB_OUTPUT
 
       - name: "Upload dist"
-        uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 # v4.3.3
+        uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3
         with:
           name: "dist"
           path: "dist/"