diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index f07f21a..59259ad 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -78,7 +78,7 @@ jobs:
           echo "### Coverage" >> "$GITHUB_STEP_SUMMARY"
           python -m coverage report --format=total |
             xargs -I{} echo "Total coverage: **{}%**" >> "$GITHUB_STEP_SUMMARY"
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@v7
         with:
           name: coverage-xml
           path: coverage.xml
@@ -112,7 +112,7 @@ jobs:
         run: pip-audit -r requirements.txt --strict
       - name: Generate CycloneDX SBOM
         run: cyclonedx-py requirements requirements.txt --of JSON -o sbom.json
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@v7
         with:
           name: sbom-cyclonedx
           path: sbom.json
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index ba6e99d..d8bbe84 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -61,7 +61,7 @@ jobs:
           cyclonedx-py requirements requirements.txt --of JSON -o sbom.json
           echo "SBOM attached to workflow artifacts (image tags: ${{ steps.meta.outputs.tags }})"
 
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@v7
         with:
           name: release-sbom
           path: sbom.json