diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 13269db28c7b70..782283d7b070ed 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -380,7 +380,7 @@ jobs:
     if: (success() || failure()) && github.event.pull_request.draft != true
     steps:
       - name: Download coverage reports
-        uses: actions/download-artifact@87c55149d96e628cc2ef7e6fc2aab372015aec85 # v4.1.3
+        uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4
         with:
           pattern: coverage-*
           path: coverage
@@ -413,7 +413,7 @@ jobs:
           os: ${{ runner.os }}
 
       - name: Download coverage reports
-        uses: actions/download-artifact@87c55149d96e628cc2ef7e6fc2aab372015aec85 # v4.1.3
+        uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4
         with:
           pattern: coverage-*
           path: coverage
@@ -560,7 +560,7 @@ jobs:
         run: corepack enable
 
       - name: Download package
-        uses: actions/download-artifact@87c55149d96e628cc2ef7e6fc2aab372015aec85 # v4.1.3
+        uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4
         with:
           name: renovate-package