diff --git a/.github/workflows/agent-suspend-resilience.yml b/.github/workflows/agent-suspend-resilience.yml
index d32a4edd..81730ab5 100644
--- a/.github/workflows/agent-suspend-resilience.yml
+++ b/.github/workflows/agent-suspend-resilience.yml
@@ -92,7 +92,7 @@ jobs:
 
       - name: upload trx
         if: always()
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
         with:
           name: agent-suspend-resilience-trx
           path: "**/agent-suspend-resilience.trx"
diff --git a/.github/workflows/pre-merge-revalidate.yml b/.github/workflows/pre-merge-revalidate.yml
index 178c5bcb..b49a801f 100644
--- a/.github/workflows/pre-merge-revalidate.yml
+++ b/.github/workflows/pre-merge-revalidate.yml
@@ -227,7 +227,7 @@ jobs:
 
       - name: upload outcome artifact
         if: always()
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
         with:
           # PR number is the integrity anchor: post-status finds THIS PR's
           # outcome by THIS name; it never re-uses an artifact across PRs.