diff --git a/.github/workflows/distcheck.yml b/.github/workflows/distcheck.yml
index 5186c27158..0819da97d9 100644
--- a/.github/workflows/distcheck.yml
+++ b/.github/workflows/distcheck.yml
@@ -68,7 +68,7 @@ jobs:
     timeout-minutes: 15
     needs: maketgz-and-verify-in-tree
     steps:
-      - uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4
+      - uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # v4
         with:
           name: 'release-tgz'
 
@@ -91,7 +91,7 @@ jobs:
     timeout-minutes: 15
     needs: maketgz-and-verify-in-tree
     steps:
-      - uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4
+      - uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # v4
         with:
           name: 'release-tgz'
 
@@ -112,7 +112,7 @@ jobs:
     timeout-minutes: 15
     needs: maketgz-and-verify-in-tree
     steps:
-      - uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4
+      - uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # v4
         with:
           name: 'release-tgz'
 
@@ -133,7 +133,7 @@ jobs:
         with:
           persist-credentials: false
 
-      - uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4
+      - uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # v4
         with:
           name: 'release-tgz'