diff --git a/.github/actions/upload-release-provenance/action.yml b/.github/actions/upload-release-provenance/action.yml
index e4c1e52c0d2..d0829efd4f4 100644
--- a/.github/actions/upload-release-provenance/action.yml
+++ b/.github/actions/upload-release-provenance/action.yml
@@ -42,7 +42,7 @@ runs:
 
     - id: download-provenance
       name: Download newly generated provenance
-      uses: actions/download-artifact@9782bd6a9848b53b110e712e20e42d89988822b7 # v3.0.1
+      uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e # v4.1.7
       with:
         name: ${{ inputs.provenance_name }}