diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 2b72eae..43a5abe 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -36,7 +36,7 @@ jobs:
           egress-policy: audit
 
       - name: Download Artifacts
-        uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16  # v4.1.8
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53  # v6.0.0
 
       - name: Get github app token
         uses: actions/create-github-app-token@df432ceedc7162793a195dd1713ff69aefc7379e  # v2.0.6
@@ -107,7 +107,7 @@ jobs:
       #     upload-release-assets: false
 
       # - name: Download Artifacts
-      #   uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16
+      #   uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53
 
       # - name: Upload attestations SLSA
       #   uses: actions/attest-build-provenance@e8998f949152b193b063cb0ec769d69d929409be