diff --git a/.github/workflows/maintenance-listen-review.yml b/.github/workflows/maintenance-listen-review.yml
index b2d21fc278..3ea6277533 100644
--- a/.github/workflows/maintenance-listen-review.yml
+++ b/.github/workflows/maintenance-listen-review.yml
@@ -13,7 +13,7 @@ jobs:
       - name: Save PR number
         run: echo "${{ github.event.pull_request.number }}" > pr.txt
 
-      - uses: actions/upload-artifact@v6.0.0
+      - uses: actions/upload-artifact@v7.0.0
         with:
           # unique name: includes workflow run id
           name: pr-number-${{ github.run_id }}
diff --git a/.github/workflows/maintenance-rewrite-kernel-configs.yml b/.github/workflows/maintenance-rewrite-kernel-configs.yml
index 5131775c52..5443eb8924 100644
--- a/.github/workflows/maintenance-rewrite-kernel-configs.yml
+++ b/.github/workflows/maintenance-rewrite-kernel-configs.yml
@@ -162,7 +162,7 @@ jobs:
 
       - name: Upload artifact (per job; unique; overwrite safe)
         if: steps.collect.outputs.nothing_to_upload != 'true'
-        uses: actions/upload-artifact@v6.0.0
+        uses: actions/upload-artifact@v7.0.0
         with:
           name: changes-${{ matrix.linuxfamily }}-${{ matrix.branch }}-${{ matrix.board }}-${{ github.run_attempt }}
           path: artifact/${{ matrix.linuxfamily }}-${{ matrix.branch }}-${{ matrix.board }}
diff --git a/.github/workflows/maintenance-security-scan.yml b/.github/workflows/maintenance-security-scan.yml
index 6c9da54183..170d91bf3d 100644
--- a/.github/workflows/maintenance-security-scan.yml
+++ b/.github/workflows/maintenance-security-scan.yml
@@ -52,7 +52,7 @@ jobs:
       # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
       # format to the repository Actions tab.
       - name: "Upload artifact"
-        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
+        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
         with:
           name: SARIF file
           path: results.sarif