diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 37bfe658327d54c87ef884c494c9a2b673f5acd8..78b80ba9f9a4c4f9eba024b63568dd0b723aefe4 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -424,7 +424,7 @@ jobs:
           show-progress: false
 
       - name: Download coverage reports
-        uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e # v4.1.7
+        uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
         with:
           pattern: coverage-*
           path: coverage
@@ -460,7 +460,7 @@ jobs:
           os: ${{ runner.os }}
 
       - name: Download coverage reports
-        uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e # v4.1.7
+        uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
         with:
           pattern: coverage-*
           path: coverage
@@ -620,7 +620,7 @@ jobs:
           node-version: ${{ env.NODE_VERSION_TEST }}
 
       - name: Download package
-        uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e # v4.1.7
+        uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
         with:
           name: renovate-package