diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index a2b88cb..493b380 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -158,7 +158,7 @@ jobs:
                     done
                   done
             - name: Upload release artifacts (for packaging)
-              uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+              uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7
               with:
                   name: release-artifacts
                   path: dist/*.tar.gz
@@ -338,7 +338,7 @@ jobs:
                   '
                   ls -la ext-out/
             - name: Upload built extensions
-              uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+              uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7
               with:
                   name: duckdb-ext-${{ matrix.arch }}
                   path: ext-out/*.duckdb_extension
@@ -495,7 +495,7 @@ jobs:
                   gpg_public_key: ${{ secrets.GPG_FIPS_RPM_PUBLIC_KEY }}
                   pgedge_builder_token: ${{ secrets.PGEDGE_BUILDER_TOKEN }}
             - name: Upload RPM cell artifact
-              uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+              uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7
               with:
                   name: rpm__${{ steps.cell.outputs.safe_comp }}__el-${{ steps.cell.outputs.os_version }}__pg${{ matrix.pg_version }}__${{ matrix.arch }}
                   path: output/el${{ steps.cell.outputs.os_version }}-${{ matrix.arch }}/
@@ -593,7 +593,7 @@ jobs:
                   gpg_public_key: ${{ secrets.GPG_FIPS_DEB_PUBLIC_KEY }}
                   pgedge_builder_token: ${{ secrets.PGEDGE_BUILDER_TOKEN }}
             - name: Upload DEB cell artifact
-              uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+              uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7
               with:
                   name: deb__${{ steps.cell.outputs.safe_comp }}__${{ steps.cell.outputs.distro }}__pg${{ matrix.pg_version }}__${{ matrix.arch }}
                   path: output/${{ steps.cell.outputs.distro }}-${{ matrix.arch }}/
@@ -658,7 +658,7 @@ jobs:
                   gpg_public_key: ${{ secrets.GPG_FIPS_RPM_PUBLIC_KEY }}
                   pgedge_builder_token: ${{ secrets.PGEDGE_BUILDER_TOKEN }}
             - name: Upload RPM cell artifact
-              uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+              uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7
               with:
                   name: rpm__coldfront-duckdb-extensions__el-${{ steps.cell.outputs.os_version }}__${{ matrix.arch }}
                   path: output/el${{ steps.cell.outputs.os_version }}-${{ matrix.arch }}/
@@ -721,7 +721,7 @@ jobs:
                   gpg_public_key: ${{ secrets.GPG_FIPS_DEB_PUBLIC_KEY }}
                   pgedge_builder_token: ${{ secrets.PGEDGE_BUILDER_TOKEN }}
             - name: Upload DEB cell artifact
-              uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+              uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7
               with:
                   name: deb__coldfront-duckdb-extensions__${{ steps.cell.outputs.distro }}__${{ matrix.arch }}
                   path: output/${{ steps.cell.outputs.distro }}-${{ matrix.arch }}/
@@ -1028,7 +1028,7 @@ jobs:
                   aws_secret_access_key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
             - name: Upload aggregated manifest as workflow artifact
               if: always()
-              uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+              uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7
               with:
                   name: aggregated-manifest
                   path: aggregated/manifest.json