diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index 193266e03..c88e63697 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -165,25 +165,25 @@ jobs:
           run: mkdir dockerfiles && mkdir -p build/tests && mkdir build/debian && chmod ugo+rwx build
 
         - name: Download Tarball
-          uses: actions/download-artifact@v3
+          uses: actions/download-artifact@v4.1.7
           with:
             name: tarball
             path: build
 
         - name: Download Debian Artifacts
-          uses: actions/download-artifact@v3
+          uses: actions/download-artifact@v4.1.7
           with:
             name: debian
             path: build/debian
 
         - name: Download Test Artifacts
-          uses: actions/download-artifact@v3
+          uses: actions/download-artifact@v4.1.7
           with:
             name: tests
             path: build/tests
 
         - name: Download Dockerfiles
-          uses: actions/download-artifact@v3
+          uses: actions/download-artifact@v4.1.7
           with:
             name: dockerfiles
             path: dockerfiles
@@ -224,12 +224,12 @@ jobs:
       name: Docs
       steps:
         - name: Download index.html
-          uses: actions/download-artifact@v3
+          uses: actions/download-artifact@v4.1.7
           with:
             name: index.html
 
         - name: Download html
-          uses: actions/download-artifact@v3
+          uses: actions/download-artifact@v4.1.7
           with:
             name: html
 
@@ -270,20 +270,20 @@ jobs:
       name: Create Release
       steps:
         - name: Download Tarball
-          uses: actions/download-artifact@v3
+          uses: actions/download-artifact@v4.1.7
           with:
             name: tarball
             path: tarball
 
         - name: Download VSCode
-          uses: actions/download-artifact@v3
+          uses: actions/download-artifact@v4.1.7
           with:
             name: release_vscode
             path: vscode
 
         # We don't actually release/upload wasm. It's build to maintain buildabilty
         # - name: Download wasm
-        #   uses: actions/download-artifact@v3
+        #   uses: actions/download-artifact@v4.1.7
         #   with:
         #     name: release_wasm
         #     path: wasm
@@ -292,37 +292,37 @@ jobs:
         # of alpine, and releasing a "wake_static" artifact is very misleading and prone to
         # user error and confusion
         # - name: Download Alpine
-        #   uses: actions/download-artifact@v3
+        #   uses: actions/download-artifact@v4.1.7
         #   with:
         #     name: release_alpine
         #     path: alpine
 
         - name: Download Debian Bullseye
-          uses: actions/download-artifact@v3
+          uses: actions/download-artifact@v4.1.7
           with:
             name: release_debian_bullseye
             path: debian_bullseye
 
         - name: Download Rocky 8
-          uses: actions/download-artifact@v3
+          uses: actions/download-artifact@v4.1.7
           with:
             name: release_rocky_8
             path: rocky_8
 
         - name: Download Rocky 9
-          uses: actions/download-artifact@v3
+          uses: actions/download-artifact@v4.1.7
           with:
             name: release_rocky_9
             path: rocky_9
 
         - name: Download Ubuntu 22.04
-          uses: actions/download-artifact@v3
+          uses: actions/download-artifact@v4.1.7
           with:
             name: release_ubuntu_22_04
             path: ubuntu_22_04
 
         - name: Download Fedora 38
-          uses: actions/download-artifact@v3
+          uses: actions/download-artifact@v4.1.7
           with:
             name: release_fedora_38
             path: fedora_38