diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 1e048f3..3c5bc8c 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -77,7 +77,7 @@ jobs:
         shell: pwsh
         run: Compress-Archive -Path "build\windows\x64\runner\Release\*" -DestinationPath bms-windows.zip
 
-      - uses: actions/upload-artifact@v7.0.1
+      - uses: actions/upload-artifact@v7.0.2
         with:
           name: bms-windows
           path: bms-windows.zip
@@ -112,7 +112,7 @@ jobs:
           cd build/macos/Build/Products/Release
           zip -r --symlinks ../../../../../bms-macos.zip bms.app
 
-      - uses: actions/upload-artifact@v7.0.1
+      - uses: actions/upload-artifact@v7.0.2
         with:
           name: bms-macos
           path: bms-macos.zip
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 3e4308e..2d1f862 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -30,7 +30,7 @@ jobs:
         shell: pwsh
         run: Compress-Archive -Path "build\windows\x64\runner\Release\*" -DestinationPath BMS-windows.zip
 
-      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a  # actions/upload-artifact@v7.0.1
+      - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9  # actions/upload-artifact@v7.0.2
         with:
           name: windows-build
           path: BMS-windows.zip
@@ -64,7 +64,7 @@ jobs:
           APP=$(find build/macos/Build/Products/Release -name "*.app" -maxdepth 1 | head -1)
           ditto -c -k --keepParent "$APP" BMS-macos.zip
 
-      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a  # actions/upload-artifact@v7.0.1
+      - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9  # actions/upload-artifact@v7.0.2
         with:
           name: macos-build
           path: BMS-macos.zip
@@ -81,11 +81,11 @@ jobs:
         id: tag
         run: echo "name=build-$(date -u +%Y%m%d-%H%M%S)" >> "$GITHUB_OUTPUT"
 
-      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c  # actions/download-artifact@v8.0.1
+      - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333  # actions/download-artifact@v8.0.2
         with:
           name: windows-build
 
-      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c  # actions/download-artifact@v8.0.1
+      - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333  # actions/download-artifact@v8.0.2
         with:
           name: macos-build
 
@@ -94,7 +94,7 @@ jobs:
           mv BMS-windows.zip "BMS-windows-${{ steps.tag.outputs.name }}.zip"
           mv BMS-macos.zip "BMS-macos-${{ steps.tag.outputs.name }}.zip"
 
-      - uses: softprops/action-gh-release@3d0d9888cb7fd7b750713d6e236d1fcb99157228  # softprops/action-gh-release@v3.0.2
+      - uses: softprops/action-gh-release@efb35369e0ad2afab669f228072c1b0d510eae64  # softprops/action-gh-release@v3.0.3
         with:
           tag_name: ${{ steps.tag.outputs.name }}
           name: ${{ steps.tag.outputs.name }}