diff --git a/.github/workflows/linux.yml b/.github/workflows/linux.yml
index a33ec5cbc..17aabf3f5 100644
--- a/.github/workflows/linux.yml
+++ b/.github/workflows/linux.yml
@@ -125,7 +125,7 @@ jobs:
           export _JAVA_OPTIONS="-Xmx4G"
           ./gradlew --parallel :ca-certificates:check --stacktrace
 
-      - uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b # v4.3.4
+      - uses: actions/upload-artifact@89ef406dd8d7e03cfd12d9e0a4a378f454709029 # v4.3.5
         if: always() # always run even if the previous step fails
         with:
           name: test-results-ca-certificates
@@ -166,7 +166,7 @@ jobs:
           mkdir ${{ matrix.product.version }}
           mv $( echo "${{ matrix.image_type }}" | tr [:upper:] [:lower:] ) ${{ matrix.product.version }}
 
-      - uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b # v4.3.4
+      - uses: actions/upload-artifact@89ef406dd8d7e03cfd12d9e0a4a378f454709029 # v4.3.5
         if: always() # always run even if the previous step fails
         with:
           name: test-results-${{ matrix.product.name }}-${{ matrix.product.version }}-${{ matrix.distro }}-${{ matrix.image_type }}
@@ -187,7 +187,7 @@ jobs:
         with:
           name: test-results-*
 
-      - uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b # v4.3.4
+      - uses: actions/upload-artifact@89ef406dd8d7e03cfd12d9e0a4a378f454709029 # v4.3.5
         with:
           name: test-results
           path: '**/build/test-results/**/TEST-*.xml'
diff --git a/.github/workflows/pkgbuild.yml b/.github/workflows/pkgbuild.yml
index 7748eace1..658371ac6 100644
--- a/.github/workflows/pkgbuild.yml
+++ b/.github/workflows/pkgbuild.yml
@@ -58,7 +58,7 @@ jobs:
         export WORKSPACE=$PWD
         bash pkgbuild/create-installer-mac.sh
 
-    - uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b # v4.3.4
+    - uses: actions/upload-artifact@89ef406dd8d7e03cfd12d9e0a4a378f454709029 # v4.3.5
       with:
         name: macos-${{ env.MAJOR_VERSION }}-${{ matrix.architecture }}
         path: workspace/target/*.pkg
diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml
index 7c8fbc587..52b22251f 100644
--- a/.github/workflows/scorecards.yml
+++ b/.github/workflows/scorecards.yml
@@ -58,7 +58,7 @@ jobs:
       # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
       # format to the repository Actions tab.
       - name: "Upload artifact"
-        uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b # v4.3.4
+        uses: actions/upload-artifact@89ef406dd8d7e03cfd12d9e0a4a378f454709029 # v4.3.5
         with:
           name: SARIF file
           path: results.sarif
diff --git a/.github/workflows/wix.yml b/.github/workflows/wix.yml
index 3a44efd3e..fa6e6d9bd 100644
--- a/.github/workflows/wix.yml
+++ b/.github/workflows/wix.yml
@@ -105,7 +105,7 @@ jobs:
           JVM: ${{ matrix.JVM }}
         shell: cmd
 
-      - uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b # v4.3.4
+      - uses: actions/upload-artifact@89ef406dd8d7e03cfd12d9e0a4a378f454709029 # v4.3.5
         with:
           name: windows-${{ env.PRODUCT_MAJOR_VERSION }}-${{ matrix.arch }}
           path: wix/ReleaseDir/*.msi