diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index d1650d9f81c039cd6b72059f23cb5e13d2898dba..fc9acb862b7c44348a985861f9c1baf107bf16d7 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -366,9 +366,9 @@ jobs:
 
       - name: Save coverage artifacts
         if: (success() || failure()) && github.event.pull_request.draft != true && matrix.coverage
-        uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3
+        uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1
         with:
-          name: coverage
+          name: ${{ matrix.upload-artifact-name }}
           path: |
             ./coverage/lcov
             ./coverage/json
@@ -385,10 +385,11 @@ jobs:
           sparse-checkout: ${{ env.SPARSE_CHECKOUT }}
 
       - name: Download coverage reports
-        uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
+        uses: actions/download-artifact@eaceaf801fd36c7dee90939fad912460b18a1ffe # v4.1.2
         with:
-          name: coverage
+          pattern: coverage-*
           path: coverage
+          merge-multiple: true
 
       - name: Codecov
         uses: codecov/codecov-action@e0b68c6749509c5f83f984dd99a76a1c1a231044 # v4.0.1
@@ -476,7 +477,7 @@ jobs:
         run: pnpm test-e2e:pack
 
       - name: Upload
-        uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3
+        uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1
         with:
           name: renovate-package
           path: renovate-0.0.0-semantic-release.tgz
@@ -500,7 +501,7 @@ jobs:
         run: pnpm build:docs
 
       - name: Upload
-        uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3
+        uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1
         with:
           name: docs
           path: tmp/docs/
@@ -526,7 +527,7 @@ jobs:
         run: corepack enable
 
       - name: Download package
-        uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
+        uses: actions/download-artifact@eaceaf801fd36c7dee90939fad912460b18a1ffe # v4.1.2
         with:
           name: renovate-package
 
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index 2f1480c1a768e72835287ac0d469e5b9695e3cda..96bc74ad9f04ee572762703fa28321f3f27d3864 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -42,7 +42,7 @@ jobs:
       # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
       # format to the repository Actions tab.
       - name: 'Upload artifact'
-        uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3
+        uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1
         with:
           name: SARIF file
           path: results.sarif
diff --git a/jest.config.ts b/jest.config.ts
index 983301386bf64c37561f823c42c86f5e5542e5ec..cf59e0deb91a898f5d70b9d011921a317ec8df2a 100644
--- a/jest.config.ts
+++ b/jest.config.ts
@@ -288,6 +288,11 @@ interface ShardGroup {
    * It's used to set `--test-timeout` Jest CLI flag.
    */
   'test-timeout-milliseconds': number;
+
+  /**
+   * It's used as the name for coverage artifact.
+   */
+  'upload-artifact-name': string;
 }
 
 /**
@@ -426,6 +431,7 @@ if (process.env.SCHEDULE_TEST_SHARDS) {
         'cache-key': cacheKey,
         'runner-timeout-minutes': runnerTimeoutMinutes,
         'test-timeout-milliseconds': testTimeoutMilliseconds,
+        'upload-artifact-name': `coverage-${shards.sort().join('_')}`,
       });
     }
   }