diff --git a/.github/workflows/packaging.yml b/.github/workflows/packaging.yml
index 0dee98c..62eb7c8 100644
--- a/.github/workflows/packaging.yml
+++ b/.github/workflows/packaging.yml
@@ -98,7 +98,7 @@ jobs:
       - name: Verify the complete pinned toolchain
         run: ./packaging/check-toolchain.sh all
 
-      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+      - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
         if: needs.native.result == 'success'
         with:
           name: barn-mac-native
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 9def0df..a281143 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -130,7 +130,7 @@ jobs:
           make check
           goreleaser check
 
-      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+      - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
         if: needs.native.result == 'success'
         with:
           name: barn-mac-native