diff --git a/.github/workflows/npm-publish.yml b/.github/workflows/npm-publish.yml
index 28514df..76e4452 100644
--- a/.github/workflows/npm-publish.yml
+++ b/.github/workflows/npm-publish.yml
@@ -102,7 +102,7 @@ jobs:
         run: test "$(npm --version)" = "11.19.0"
 
       - name: Download the checked tarball from this run
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
         with:
           name: npm-release
           path: ${{ env.RELEASE_DIR }}
@@ -181,7 +181,7 @@ jobs:
         run: test "$(npm --version)" = "11.19.0"
 
       - name: Download the checked tarball from this run
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
         with:
           name: npm-release
           path: ${{ env.RELEASE_DIR }}