diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 39f3e4e22..3e2a966e0 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -182,7 +182,7 @@ jobs:
     steps:
       - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
       - name: Download all artifacts
-        uses: actions/download-artifact@8caf195ad4b1dee92908e23f56eeb0696f1dd42d # v4.1.5
+        uses: actions/download-artifact@9c19ed7fe5d278cd354c7dfd5d3b88589c7e2395 # v4.1.6
         with:
           path: artifacts
       - name: Create release bundle with archives for all builds
@@ -247,7 +247,7 @@ jobs:
           authToken: '${{ secrets.CACHIX_AUTH_TOKEN }}'
           tools: release.dockerHubDescription.bin
       - name: Download Docker image
-        uses: actions/download-artifact@8caf195ad4b1dee92908e23f56eeb0696f1dd42d # v4.1.5
+        uses: actions/download-artifact@9c19ed7fe5d278cd354c7dfd5d3b88589c7e2395 # v4.1.6
         with:
           name: postgrest-docker-x64
       - name: Publish images on Docker Hub
diff --git a/.github/workflows/report.yaml b/.github/workflows/report.yaml
index cb318dd92..2a98e6445 100644
--- a/.github/workflows/report.yaml
+++ b/.github/workflows/report.yaml
@@ -19,7 +19,7 @@ jobs:
     if: github.event.workflow_run.conclusion == 'success' || github.event.workflow_run.conclusion == 'failure'
     steps:
       - name: Download from Artifacts
-        uses: actions/download-artifact@8caf195ad4b1dee92908e23f56eeb0696f1dd42d # v4.1.5
+        uses: actions/download-artifact@9c19ed7fe5d278cd354c7dfd5d3b88589c7e2395 # v4.1.6
         with:
           github-token: ${{ github.token }}
           run-id: ${{ github.event.workflow_run.id }}