diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index a9974af..d1c75c1 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -38,13 +38,13 @@ jobs:
         run: sha256sum shopify_function_v${{ steps.provider_version.outputs.version }}.wasm.gz | awk '{ print $1 }' > shopify_function_v${{ steps.provider_version.outputs.version }}.wasm.gz.sha256
 
       - name: Upload asset to artifacts
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: shopify_function_v${{ steps.provider_version.outputs.version }}.wasm.gz
           path: shopify_function_v${{ steps.provider_version.outputs.version }}.wasm.gz
 
       - name: Upload asset hash to artifacts
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: shopify_function_v${{ steps.provider_version.outputs.version }}.wasm.gz.sha256
           path: shopify_function_v${{ steps.provider_version.outputs.version }}.wasm.gz.sha256
@@ -128,7 +128,7 @@ jobs:
         run: gzip -k -f ${{ matrix.path }} && mv ${{ matrix.path }}.gz ${{ steps.asset_name.outputs.asset_name }}.gz
 
       - name: Upload assets to artifacts
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: ${{ steps.asset_name.outputs.asset_name }}.gz
           path: ${{ steps.asset_name.outputs.asset_name }}.gz
@@ -142,7 +142,7 @@ jobs:
         run: ${{ matrix.shasum_cmd }} ${{ steps.asset_name.outputs.asset_name }}.gz | awk '{ print $1 }' > ${{ steps.asset_name.outputs.asset_name }}.gz.sha256
 
       - name: Upload asset hash to artifacts
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: ${{ steps.asset_name.outputs.asset_name }}.gz.sha256
           path: ${{ steps.asset_name.outputs.asset_name }}.gz.sha256