diff --git a/.github/workflows/prerelease.yml b/.github/workflows/prerelease.yml
index 7d586f37f..e02d3b26e 100644
--- a/.github/workflows/prerelease.yml
+++ b/.github/workflows/prerelease.yml
@@ -225,7 +225,7 @@ jobs:
           persist-credentials: false
 
       - name: Download bump result
-        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093  # v4.3.0
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c  # v8.0.1
         with:
           name: bump-result
           path: /tmp/
@@ -255,7 +255,7 @@ jobs:
 
       - name: Download TypeScript build artifacts
         if: needs.build.outputs.ts_count != '0'
-        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093  # v4.3.0
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c  # v8.0.1
         with:
           name: ts-canary-artifacts
 
@@ -278,7 +278,7 @@ jobs:
 
       - name: Download Python build artifacts
         if: needs.build.outputs.has_py_packages == 'true'
-        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093  # v4.3.0
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c  # v8.0.1
         with:
           name: py-canary-artifacts
 
diff --git a/.github/workflows/publish-commit.yml b/.github/workflows/publish-commit.yml
index 8022b5925..bc0b3b0a6 100644
--- a/.github/workflows/publish-commit.yml
+++ b/.github/workflows/publish-commit.yml
@@ -69,7 +69,7 @@ jobs:
           node-version-file: "package.json"
 
       - name: Download build artifacts
-        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093  # v4.3.0
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c  # v8.0.1
         with:
           name: pkg-pr-new-build
 
diff --git a/.github/workflows/publish-kotlin-sdk.yml b/.github/workflows/publish-kotlin-sdk.yml
index 19c090be2..30be4dfdf 100644
--- a/.github/workflows/publish-kotlin-sdk.yml
+++ b/.github/workflows/publish-kotlin-sdk.yml
@@ -154,7 +154,7 @@ jobs:
         run: yes | sdkmanager --licenses || true
 
       - name: Download Gradle build cache
-        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093  # v4.3.0
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c  # v8.0.1
         with:
           name: kotlin-gradle-cache
           path: sdks/community/kotlin/library/
diff --git a/.github/workflows/publish-python-preview.yml b/.github/workflows/publish-python-preview.yml
index cfc95599d..b5d5b15fe 100644
--- a/.github/workflows/publish-python-preview.yml
+++ b/.github/workflows/publish-python-preview.yml
@@ -22,7 +22,7 @@ jobs:
 
     steps:
       - name: Download dist artifacts
-        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093  # v4.3.0
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c  # v8.0.1
         with:
           name: python-preview-dist
           path: dist-preview/
@@ -30,7 +30,7 @@ jobs:
           github-token: ${{ github.token }}
 
       - name: Download PR metadata
-        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093  # v4.3.0
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c  # v8.0.1
         with:
           name: python-preview-metadata
           path: pr-metadata/
diff --git a/.github/workflows/publish-release.yml b/.github/workflows/publish-release.yml
index 149b91c6d..fe72bdf2c 100644
--- a/.github/workflows/publish-release.yml
+++ b/.github/workflows/publish-release.yml
@@ -280,7 +280,7 @@ jobs:
 
       - name: Download TypeScript build artifacts
         if: needs.build.outputs.ts_count != '0'
-        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093  # v4.3.0
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c  # v8.0.1
         with:
           name: ts-build-artifacts
 
@@ -325,7 +325,7 @@ jobs:
 
       - name: Download Python build artifacts
         if: needs.build.outputs.py_count != '0'
-        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093  # v4.3.0
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c  # v8.0.1
         with:
           name: py-build-artifacts