diff --git a/.github/workflows/coverage.yml b/.github/workflows/coverage.yml
index 79eb6ff3..63e281b7 100644
--- a/.github/workflows/coverage.yml
+++ b/.github/workflows/coverage.yml
@@ -84,7 +84,7 @@ jobs:
         exec ./.ci.sh
 
     - name: Store coverage .info and HTML report
-      uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08  # v4.6.0
+      uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1  # v4.6.1
       with:
         name: coverage
         path: expat/coverage__*/
diff --git a/.github/workflows/coverity-scan.yml b/.github/workflows/coverity-scan.yml
index 2f012ab2..d6788872 100644
--- a/.github/workflows/coverity-scan.yml
+++ b/.github/workflows/coverity-scan.yml
@@ -115,7 +115,7 @@ jobs:
         description: "coverity-scan-action libexpat/libexpat / ${{ steps.determine_version.outputs.git_commit }}"
 
     - name: Offer analysis tarball for inspection
-      uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08  # v4.6.0
+      uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1  # v4.6.1
       with:
         name: expat_coverity_scan_upload_${{ github.sha }}
         path: expat/cov-int.tgz
diff --git a/.github/workflows/fuzzing.yml b/.github/workflows/fuzzing.yml
index 9bbf8e87..278cf21f 100644
--- a/.github/workflows/fuzzing.yml
+++ b/.github/workflows/fuzzing.yml
@@ -129,7 +129,7 @@ jobs:
         find corpus/ -type f | sort | xargs "fuzz/${fuzzer}" "${fuzz_args[@]}"
 
     - name: Store fuzzing logs of last batch
-      uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08  # v4.6.0
+      uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1  # v4.6.1
       with:
         name: expat_fuzzing_logs_last_${{ matrix.fuzzer }}_${{ github.sha }}
         path: expat/build/fuzz-*.log
@@ -149,7 +149,7 @@ jobs:
         llvm-cov report fuzz/${fuzzer} -instr-profile=coverage/expat.profdata                 -sources ../lib/ | tee coverage/report_files.txt
 
     - name: Store coverage report
-      uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08  # v4.6.0
+      uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1  # v4.6.1
       with:
         name: expat_fuzzing_coverage_${{ matrix.fuzzer }}_${{ github.sha }}
         path: expat/build/coverage/
diff --git a/.github/workflows/windows-binaries.yml b/.github/workflows/windows-binaries.yml
index bf903f82..dc4ddf9e 100644
--- a/.github/workflows/windows-binaries.yml
+++ b/.github/workflows/windows-binaries.yml
@@ -151,7 +151,7 @@ jobs:
         ( cd app && zip -9 -r ../"${zip_name}" . )
 
     - name: Offer binaries for download
-      uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08  # v4.6.0
+      uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1  # v4.6.1
       with:
         name: expat_${{ matrix.expat_platform }}_${{ github.sha }}
         path: expat/${{ matrix.expat_platform }}/expat-win*bin-*.*.*.*