diff --git a/.github/workflows/ci-locks.yml b/.github/workflows/ci-locks.yml
index aec75ffb..ebcb1c74 100644
--- a/.github/workflows/ci-locks.yml
+++ b/.github/workflows/ci-locks.yml
@@ -106,7 +106,7 @@ jobs:
       uses: actions/checkout@v4
 
     - name: "Download lock artifacts"
-      uses: actions/download-artifact@v3
+      uses: actions/download-artifact@v4.1.7
       with:
         name: lock-artifacts
         path: ${{ github.workspace }}/requirements/locks
diff --git a/.github/workflows/ci-wheels.yml b/.github/workflows/ci-wheels.yml
index 860ea22c..c5fd3277 100644
--- a/.github/workflows/ci-wheels.yml
+++ b/.github/workflows/ci-wheels.yml
@@ -117,7 +117,7 @@ jobs:
     name: "Show artifacts"
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/download-artifact@v3
+    - uses: actions/download-artifact@v4.1.7
       with:
         name: pypi-artifacts
         path: ${{ github.workspace }}/dist
@@ -134,7 +134,7 @@ jobs:
     # upload to Test PyPI for every commit on main branch
     if: github.event_name == 'push' && github.event.ref == 'refs/heads/main'
     steps:
-    - uses: actions/download-artifact@v3
+    - uses: actions/download-artifact@v4.1.7
       with:
         name: pypi-artifacts
         path: ${{ github.workspace }}/dist
@@ -155,7 +155,7 @@ jobs:
     # upload to PyPI for every tag starting with 'v'
     if: github.event_name == 'push' && startsWith(github.event.ref, 'refs/tags/v')
     steps:
-    - uses: actions/download-artifact@v3
+    - uses: actions/download-artifact@v4.1.7
       with:
         name: pypi-artifacts
         path: ${{ github.workspace }}/dist