diff --git a/.github/workflows/build-ironic-images.yaml b/.github/workflows/build-ironic-images.yaml
index 123021ee4..2e2d4ce57 100644
--- a/.github/workflows/build-ironic-images.yaml
+++ b/.github/workflows/build-ironic-images.yaml
@@ -119,7 +119,7 @@ jobs:
         run: echo "TIMESTAMP=$(git show --no-patch --no-notes --pretty='%cd' --date=format:'%Y%m%d%H%M%S' ${{ github.sha }})" >>  $GITHUB_ENV
 
       - name: Download artifacts from previous job
-        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
+        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5
         with:
           name: image-artifacts
           path: ironic-images/artifacts
diff --git a/.github/workflows/code-test.yaml b/.github/workflows/code-test.yaml
index eac7ae14f..863422932 100644
--- a/.github/workflows/code-test.yaml
+++ b/.github/workflows/code-test.yaml
@@ -71,7 +71,7 @@ jobs:
     needs: [uv]
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
+      - uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5
         with:
           pattern: coverage-*
           merge-multiple: true
diff --git a/.github/workflows/coverage-report.yaml b/.github/workflows/coverage-report.yaml
index 85d0234ca..6c8b01cac 100644
--- a/.github/workflows/coverage-report.yaml
+++ b/.github/workflows/coverage-report.yaml
@@ -16,7 +16,7 @@ jobs:
     runs-on: ubuntu-latest
     if: ${{ github.event.workflow_run.conclusion == 'success' }}
     steps:
-      - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
+      - uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5
         with:
           name: coverage.xml
           run-id: ${{ github.event.workflow_run.id }}