diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 30cce52bb..ec5f133a6 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -76,7 +76,7 @@ jobs:
           shasum -a 256 "${ASSET}.tar.gz" > "${ASSET}.tar.gz.sha256"
 
       - name: Upload build artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: ${{ matrix.asset }}
           path: |
diff --git a/.github/workflows/sbom.yml b/.github/workflows/sbom.yml
index 03e230fa2..dcad0f892 100644
--- a/.github/workflows/sbom.yml
+++ b/.github/workflows/sbom.yml
@@ -33,7 +33,7 @@ jobs:
         run: bash scripts/sbom.sh
 
       - name: Upload SBOM as workflow artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: covenant-sbom-spdx
           path: dist/covenant-sbom.spdx.json