diff --git a/.github/workflows/build-test-release.yaml b/.github/workflows/build-test-release.yaml
index f2d1cda4..0510b345 100644
--- a/.github/workflows/build-test-release.yaml
+++ b/.github/workflows/build-test-release.yaml
@@ -351,7 +351,7 @@ jobs:
 
       - name: '⬇ Download build artefacts'
         # yamllint disable-line rule:line-length
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0  # v5.0.0
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53  # v6.0.0
         with:
           name: "${{ needs.python-build.outputs.artefact_name }}"
           path: "${{ needs.python-build.outputs.artefact_path }}"
diff --git a/.github/workflows/sbom.yaml b/.github/workflows/sbom.yaml
index d15fa1d9..09d4c54c 100644
--- a/.github/workflows/sbom.yaml
+++ b/.github/workflows/sbom.yaml
@@ -70,7 +70,7 @@ jobs:
       - name: "Download Previous SBOM (for diff)"
         if: github.event_name != 'workflow_dispatch'
         # yamllint disable-line rule:line-length
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
         with:
           name: sbom-cyclonedx-previous
           path: previous-sbom/