diff --git a/.github/workflows/build-apk.yml b/.github/workflows/build-apk.yml
index 7a7f054..9b7e377 100644
--- a/.github/workflows/build-apk.yml
+++ b/.github/workflows/build-apk.yml
@@ -44,7 +44,7 @@ jobs:
 
       - name: Upload lint report
         if: always()
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: lint-results
           path: app/build/reports/lint-results-debug.html
@@ -56,7 +56,7 @@ jobs:
       # Debug builds are for CI inspection only. They are signed with a
       # throwaway key generated on the runner and are never published.
       - name: Upload debug APK
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: sl-post-stamps-debug
           path: app/build/outputs/apk/debug/app-debug.apk