diff --git a/.github/workflows/binaries.yaml b/.github/workflows/binaries.yaml
index 39238e7..345d446 100644
--- a/.github/workflows/binaries.yaml
+++ b/.github/workflows/binaries.yaml
@@ -25,7 +25,7 @@ jobs:
         run: |
           go-licenses save ./... --ignore $(go list -m) --save_path packaging/third-party
           chmod -R u+w packaging/third-party
-      - uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b # v4.3.4
+      - uses: actions/upload-artifact@89ef406dd8d7e03cfd12d9e0a4a378f454709029 # v4.3.5
         with:
           name: third-party-licenses
           path: packaging/third-party/
@@ -103,7 +103,7 @@ jobs:
           CGO_ENABLED: '1'
           GOARCH: arm64
 
-      - uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b # v4.3.4
+      - uses: actions/upload-artifact@89ef406dd8d7e03cfd12d9e0a4a378f454709029 # v4.3.5
         with:
           name: binaries-${{ matrix.os }}
           path: binaries/
diff --git a/.github/workflows/npm_package.yaml b/.github/workflows/npm_package.yaml
index d6f33f1..63502ea 100644
--- a/.github/workflows/npm_package.yaml
+++ b/.github/workflows/npm_package.yaml
@@ -43,7 +43,7 @@ jobs:
         with:
           node-version: '18'
       - run: npm pack
-      - uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b # v4.3.4
+      - uses: actions/upload-artifact@89ef406dd8d7e03cfd12d9e0a4a378f454709029 # v4.3.5
         with:
           name: npm-package
           path: go-text-template-napi-*.tgz
diff --git a/.github/workflows/ossf-scorecard.yml b/.github/workflows/ossf-scorecard.yml
index 6431e4a..000c0de 100644
--- a/.github/workflows/ossf-scorecard.yml
+++ b/.github/workflows/ossf-scorecard.yml
@@ -30,7 +30,7 @@ jobs:
           publish_results: true
 
       - name: Upload artifact
-        uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b # v4.3.4
+        uses: actions/upload-artifact@89ef406dd8d7e03cfd12d9e0a4a378f454709029 # v4.3.5
         with:
           name: SARIF file
           path: results.sarif