diff --git a/.github/workflows/build-pipeline.yml b/.github/workflows/build-pipeline.yml
index ea8d2edf..73555ecd 100644
--- a/.github/workflows/build-pipeline.yml
+++ b/.github/workflows/build-pipeline.yml
@@ -59,7 +59,7 @@ jobs:
         with:
           python-version: ${{ matrix.python-version }}
       - name: Download dist artifacts
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v4
         with:
           name: pyhanko-dist
           path: dist/
@@ -86,7 +86,7 @@ jobs:
         with:
           python-version: ${{ matrix.python-version }}
       - name: Download dist artifacts
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v4
         with:
           name: pyhanko-dist
           path: dist/
@@ -123,7 +123,7 @@ jobs:
         with:
           python-version: ${{ env.MAIN_PYTHON_VERSION }}
       - name: Download dist artifacts
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v4
         with:
           name: pyhanko-dist
           path: dist/
@@ -144,7 +144,7 @@ jobs:
       # checkout necessary to ensure the uploaded report contains the correct paths
       - uses: actions/checkout@v4
       - name: Retrieve coverage reports
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v4
         with:
           name: coverage
           path: ./reports/
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index c9448e52..2a6a7f2e 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -81,17 +81,17 @@ jobs:
       discussions: write
     steps:
     - name: Download dist artifacts
-      uses: actions/download-artifact@v3
+      uses: actions/download-artifact@v4
       with:
         name: pyhanko-dist
         path: dist/
     - name: Download provenance data
-      uses: actions/download-artifact@v3
+      uses: actions/download-artifact@v4
       with:
         name: multiple.intoto.jsonl
         path: provenance/
     - name: Download release body
-      uses: actions/download-artifact@v3
+      uses: actions/download-artifact@v4
       with:
         name: release-body
         path: release-body