diff --git a/.github/workflows/plugindb.yml b/.github/workflows/plugindb.yml
index d95cdd72..6d7c4458 100644
--- a/.github/workflows/plugindb.yml
+++ b/.github/workflows/plugindb.yml
@@ -227,7 +227,7 @@ jobs:
             raise SystemExit("Error: ./src_plugin/pyproject.toml not found!")
 
     - name: download ncrystal wheels
-      uses: actions/download-artifact@v6
+      uses: actions/download-artifact@v7.0.0
       with:
         name: wheels-ncrystal-${{ matrix.os }}
         path: ./dist
@@ -339,13 +339,13 @@ jobs:
 
     steps:
     - name: download virtapi app
-      uses: actions/download-artifact@v6
+      uses: actions/download-artifact@v7.0.0
       with:
         name: virtapi-app-${{ matrix.os }}
         path: ./app
 
     - name: download ncrystal wheels
-      uses: actions/download-artifact@v6
+      uses: actions/download-artifact@v7.0.0
       with:
         name: wheels-ncrystal-${{ matrix.os }}
         path: ./dist
diff --git a/.github/workflows/pypi.yml b/.github/workflows/pypi.yml
index 399fd3cb..e097126c 100644
--- a/.github/workflows/pypi.yml
+++ b/.github/workflows/pypi.yml
@@ -181,19 +181,19 @@ jobs:
 
     steps:
       - name: download ncrystal-python sdist
-        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53
+        uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131
         with:
           name: sdist-ncrystal-python
           path: ./sdist-python
 
       - name: download ncrystal-metapkg sdist
-        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53
+        uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131
         with:
           name: sdist-ncrystal-metapkg
           path: ./sdist-metapkg
 
       - name: download ncrystal-verify sdist
-        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53
+        uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131
         with:
           name: sdist-ncrystal-verify
           path: ./sdist-verify
@@ -263,7 +263,7 @@ jobs:
 
     steps:
       - name: download ncrystal-core sdist
-        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53
+        uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131
         with:
           name: sdist-ncrystal-core
           path: ./sdist
@@ -319,7 +319,7 @@ jobs:
     needs: [preparations, build_sdists, build_core_wheels, build_pure_wheels]
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53
+      - uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131
         with:
           pattern: "ncrystal-core-wheels-*"
           path: ncrystal-core-wheels-raw #unpacks all artifacts into ncrystal-core-wheels-raw/
@@ -339,43 +339,43 @@ jobs:
         run: ls -l ./dist_core
 
       - name: download ncrystal-core sdist
-        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53
+        uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131
         with:
           name: sdist-ncrystal-core
           path: ./dist_core
 
       - name: download ncrystal-python pure wheel
-        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53
+        uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131
         with:
           name: wheel-ncrystal-python
           path: ./dist_python
 
       - name: download ncrystal-metapkg pure wheel
-        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53
+        uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131
         with:
           name: wheel-ncrystal-metapkg
           path: ./dist_metapkg
 
       - name: download ncrystal-verify pure wheel
-        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53
+        uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131
         with:
           name: wheel-ncrystal-verify
           path: ./dist_verify
 
       - name: download ncrystal-python sdist
-        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53
+        uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131
         with:
           name: sdist-ncrystal-python
           path: ./dist_python
 
       - name: download ncrystal-metapkg sdist
-        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53
+        uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131
         with:
           name: sdist-ncrystal-metapkg
           path: ./dist_metapkg
 
       - name: download ncrystal-verify sdist
-        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53
+        uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131
         with:
           name: sdist-ncrystal-verify
           path: ./dist_verify
@@ -468,25 +468,25 @@ jobs:
       id-token: write # IMPORTANT: this permission is mandatory for trusted publishing
     steps:
       - name: download ncrystal-core dist
-        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53
+        uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131
         with:
           name: final-dist-ncrystal-core
           path: ./dist_core
 
       - name: download ncrystal-python dist
-        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53
+        uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131
         with:
           name: final-dist-ncrystal-python
           path: ./dist_python
 
       - name: download ncrystal-metapkg dist
-        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53
+        uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131
         with:
           name: final-dist-ncrystal-metapkg
           path: ./dist_metapkg
 
       - name: download ncrystal-verify dist
-        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53
+        uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131
         with:
           name: final-dist-ncrystal-verify
           path: ./dist_verify