diff --git a/.github/workflows/punchboot-tools.yml b/.github/workflows/punchboot-tools.yml
index d589aed4..4b52de63 100644
--- a/.github/workflows/punchboot-tools.yml
+++ b/.github/workflows/punchboot-tools.yml
@@ -81,7 +81,7 @@ jobs:
       id-token: write
     if: github.repository == 'jonasblixt/punchboot' && github.event_name == 'workflow_dispatch'
     steps:
-      - uses: actions/download-artifact@v3
+      - uses: actions/download-artifact@v4.1.7
         with:
           name: artifact
           path: dist
@@ -101,7 +101,7 @@ jobs:
       id-token: write
     if: github.repository == 'jonasblixt/punchboot' && github.event_name == 'push' && startsWith(github.ref, 'refs/tags/v')
     steps:
-      - uses: actions/download-artifact@v3
+      - uses: actions/download-artifact@v4.1.7
         with:
           name: artifact
           path: dist