diff --git a/.github/workflows/zap_release.yml b/.github/workflows/zap_release.yml
index 3cca192..3bb7aa5 100644
--- a/.github/workflows/zap_release.yml
+++ b/.github/workflows/zap_release.yml
@@ -136,7 +136,7 @@ jobs:
           cat release-body.md
 
       - name: Upload release body artifact
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: release-body
           path: release-body.md
@@ -213,7 +213,7 @@ jobs:
           GIT_RELEASE_TAG: ${{ needs.prepare_metadata.outputs.release_tag }}
 
       - name: Upload DMG artifact
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: waz-macos-${{ matrix.dmg_name_suffix }}
           path: ${{ steps.bundle_app.outputs.dmg_path }}
@@ -237,7 +237,7 @@ jobs:
         shell: bash
 
       - name: Upload CLI artifact
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: waz-cli-macos-${{ matrix.arch }}
           path: waz-macos-${{ matrix.arch }}.tar.gz
@@ -276,7 +276,7 @@ jobs:
           GIT_RELEASE_TAG: ${{ needs.prepare_metadata.outputs.release_tag }}
 
       - name: Upload installer artifact
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: waz-windows-x64
           path: ${{ steps.bundle_app.outputs.installer_path }}
@@ -419,7 +419,7 @@ jobs:
         shell: bash
 
       - name: Upload package artifacts
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: waz-linux-x86_64
           # packages_dir 是 target/release-lto/bundle/linux,AppImage/deb/Arch 都落在这里
@@ -483,7 +483,7 @@ jobs:
         shell: bash
 
       - name: Upload CLI artifact
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: waz-cli-linux-x86_64
           path: waz-linux-x86_64.tar.gz