diff --git a/.github/workflows/app-platform-phase5-certification.yml b/.github/workflows/app-platform-phase5-certification.yml
index 4b266d4f..b9df59f2 100644
--- a/.github/workflows/app-platform-phase5-certification.yml
+++ b/.github/workflows/app-platform-phase5-certification.yml
@@ -88,7 +88,7 @@ jobs:
 
       - name: Upload safe certification evidence
         if: always()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: app-platform-phase5-safe-${{ github.run_id }}-${{ github.run_attempt }}
           path: ${{ env.DEFT_APP_PLATFORM_EVIDENCE_DIR }}/safe
@@ -98,7 +98,7 @@ jobs:
 
       - name: Upload exact candidate image archive
         if: success()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: app-platform-phase5-image-${{ github.run_id }}-${{ github.run_attempt }}
           path: ${{ env.DEFT_APP_PLATFORM_EVIDENCE_DIR }}/candidate-image.tar.zst
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 292829a4..e4f46067 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -172,7 +172,7 @@ jobs:
         run: pnpm test:hermes-employee-release-gate
       - name: Retain certification evidence
         if: always()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: hermes-employee-release-gate
           path: |
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index fba9e812..cc453de5 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -131,7 +131,7 @@ jobs:
           DEFT_RELEASE_COMMIT: ${{ steps.release.outputs.sha }}
         run: pnpm test:hermes-employee-release-gate
       - name: Publish certification evidence
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: hermes-employee-release-certification
           path: |