diff --git a/.github/workflows/benchmark.yml b/.github/workflows/benchmark.yml
index 9f4ed58447d..b6ee943d1d3 100644
--- a/.github/workflows/benchmark.yml
+++ b/.github/workflows/benchmark.yml
@@ -209,7 +209,7 @@ jobs:
           sparse-checkout-cone-mode: false
 
       - name: Download benchmark raw results
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c  # v8.0.1
+        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333  # v8.0.2
         with:
           pattern: csv-*
           merge-multiple: true
diff --git a/.github/workflows/build-shared.yml b/.github/workflows/build-shared.yml
index 73f7ec6afbb..ad212b43777 100644
--- a/.github/workflows/build-shared.yml
+++ b/.github/workflows/build-shared.yml
@@ -41,7 +41,7 @@ jobs:
   build:
     runs-on: ${{ inputs.runner }}
     steps:
-      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c  # v8.0.1
+      - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333  # v8.0.2
         with:
           path: tarballs
           pattern: '*.tar.gz'
@@ -62,7 +62,7 @@ jobs:
           name: nodejs
           authToken: ${{ secrets.CACHIX_AUTH_TOKEN }}
 
-      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c  # v8.0.1
+      - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333  # v8.0.2
         if: inputs.v8-nar
         with:
           name: ${{ inputs.v8-nar }}
diff --git a/.github/workflows/build-tarball.yml b/.github/workflows/build-tarball.yml
index b3ac6aad475..fa43038772e 100644
--- a/.github/workflows/build-tarball.yml
+++ b/.github/workflows/build-tarball.yml
@@ -119,7 +119,7 @@ jobs:
         with:
           version: v0.17.0
       - name: Download tarball
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c  # v8.0.1
+        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333  # v8.0.2
         with:
           path: tarballs
       - name: Extract tarball
diff --git a/.github/workflows/nix-changes-comment.yml b/.github/workflows/nix-changes-comment.yml
index db96ff4a09c..1eccc6a710d 100644
--- a/.github/workflows/nix-changes-comment.yml
+++ b/.github/workflows/nix-changes-comment.yml
@@ -18,7 +18,7 @@ jobs:
       pull-requests: write
     steps:
       - name: Download artefacts
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c  # v8.0.1
+        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333  # v8.0.2
         with:
           run-id: ${{ github.event.workflow_run.id }}
           # Using privileged token to be able to download file from a different workflow
diff --git a/.github/workflows/test-shared.yml b/.github/workflows/test-shared.yml
index 6e10cf95338..d9420cbf206 100644
--- a/.github/workflows/test-shared.yml
+++ b/.github/workflows/test-shared.yml
@@ -181,7 +181,7 @@ jobs:
     env:
       HAS_CACHIX_AUTH_TOKEN: ${{ secrets.CACHIX_AUTH_TOKEN && 'true' }}
     steps:
-      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c  # v8.0.1
+      - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333  # v8.0.2
         with:
           path: tarballs