diff --git a/.github/workflows/release-bridge.yml b/.github/workflows/release-bridge.yml
index 2c74fda..bad89a4 100644
--- a/.github/workflows/release-bridge.yml
+++ b/.github/workflows/release-bridge.yml
@@ -104,7 +104,7 @@ jobs:
               sys.exit(f"versionsec=={want} is not public yet; refusing to publish the bridge")
           print(f"versionsec=={want} is public; the bridge pin is satisfiable")
           PY
-      - uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
+      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: bridge-dist
           path: packaging/forgeguard-bridge/dist