diff --git a/.github/workflows/release-linux.yml b/.github/workflows/release-linux.yml
index e17bd51..05c5b8b 100644
--- a/.github/workflows/release-linux.yml
+++ b/.github/workflows/release-linux.yml
@@ -85,7 +85,7 @@ jobs:
       id-token: write
     steps:
       - name: Download digests
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
         with:
           path: ${{ runner.temp }}/digests
           pattern: controller-digest-*
@@ -240,7 +240,7 @@ jobs:
       attestations: write
     steps:
       - name: Download Linux binaries
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
         with:
           path: release
           pattern: release-binary-linux-*
diff --git a/.github/workflows/release-windows.yml b/.github/workflows/release-windows.yml
index 5b864d9..6570e81 100644
--- a/.github/workflows/release-windows.yml
+++ b/.github/workflows/release-windows.yml
@@ -115,7 +115,7 @@ jobs:
           persist-credentials: false
 
       - name: Download unsigned Windows binaries
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
         with:
           name: unsigned-windows-binaries-${{ matrix.arch }}
           path: signing
@@ -216,7 +216,7 @@ jobs:
           pnpm install --frozen-lockfile
 
       - name: Download signed Windows payload
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
         with:
           name: signed-windows-payload-${{ matrix.arch }}
           path: target/${{ matrix.target }}/release
@@ -280,7 +280,7 @@ jobs:
           persist-credentials: false
 
       - name: Download unsigned MSI
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
         with:
           name: unsigned-windows-installer-${{ matrix.arch }}
           path: release
@@ -345,7 +345,7 @@ jobs:
           persist-credentials: false
 
       - name: Download signed MSI
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
         with:
           name: signed-windows-installer-${{ matrix.arch }}
           path: release
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 62063bb..6b87d17 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -92,21 +92,21 @@ jobs:
       contents: write
     steps:
       - name: Download binaries
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
         with:
           path: release
           pattern: release-binary-*
           merge-multiple: true
 
       - name: Download signed Windows installers
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
         with:
           path: release
           pattern: signed-windows-installer-*
           merge-multiple: true
 
       - name: Download notarized macOS installers
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
         with:
           path: release
           pattern: macos-installer-*