diff --git a/.github/workflows/actionlint.yml b/.github/workflows/actionlint.yml
index 7c2be2ce673f8..239a1804e4fd8 100644
--- a/.github/workflows/actionlint.yml
+++ b/.github/workflows/actionlint.yml
@@ -71,7 +71,7 @@ jobs:
       security-events: write
     steps:
       - name: Download SARIF file
-        uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4.2.1
+        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
         with:
           name: results.sarif
           path: results.sarif
diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml
index fd7dc1ded150d..e1f8181042907 100644
--- a/.github/workflows/docker.yml
+++ b/.github/workflows/docker.yml
@@ -269,7 +269,7 @@ jobs:
           cache-binary: false
 
       - name: Download Docker image digests
-        uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4.2.1
+        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
         with:
           path: ${{ runner.temp }}/digests
           pattern: digest-${{ matrix.version }}-*
diff --git a/.github/workflows/pkg-installer.yml b/.github/workflows/pkg-installer.yml
index 28ac3121e33e2..5d0f1aa8dee05 100644
--- a/.github/workflows/pkg-installer.yml
+++ b/.github/workflows/pkg-installer.yml
@@ -160,7 +160,7 @@ jobs:
             name: macos-15-arm64
     steps:
       - name: Download installer from GitHub Actions
-        uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4.2.1
+        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
         with:
           name: "${{ needs.build.outputs.installer_path }}"
 
@@ -213,7 +213,7 @@ jobs:
       contents: write
     steps:
       - name: Download installer from GitHub Actions
-        uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4.2.1
+        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
         with:
           name: "${{ needs.build.outputs.installer_path }}"