diff --git a/.github/workflows/artifact.yml b/.github/workflows/artifact.yml
index 2d9cde5..d7d5ca8 100644
--- a/.github/workflows/artifact.yml
+++ b/.github/workflows/artifact.yml
@@ -59,7 +59,7 @@ jobs:
 
       - name: Upload artifacts (reports, benchmarks, proof logs)
         if: always()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: aec-artifacts
           path: |
diff --git a/.github/workflows/mutation.yml b/.github/workflows/mutation.yml
index 4790850..1f90228 100644
--- a/.github/workflows/mutation.yml
+++ b/.github/workflows/mutation.yml
@@ -76,7 +76,7 @@ jobs:
 
       - name: upload report
         if: always()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: mutation-report
           path: |
diff --git a/.github/workflows/release-provenance.yml b/.github/workflows/release-provenance.yml
index f33383f..bc3098b 100644
--- a/.github/workflows/release-provenance.yml
+++ b/.github/workflows/release-provenance.yml
@@ -41,7 +41,7 @@ jobs:
         run: cosign sign-blob --yes --bundle artifacts/release-manifest.sigstore.json artifacts/release-manifest.sha256
       - name: Sign SBOM
         run: cosign sign-blob --yes --bundle artifacts/sbom.sigstore.json artifacts/sbom.spdx.json
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@v7
         with:
           name: ghost-ark-provenance-${{ github.sha }}
           path: artifacts/