diff --git a/.github/workflows/distcheck.yml b/.github/workflows/distcheck.yml
index c52d234e0f..eab21fbc3b 100644
--- a/.github/workflows/distcheck.yml
+++ b/.github/workflows/distcheck.yml
@@ -71,7 +71,7 @@ jobs:
     timeout-minutes: 15
     needs: maketgz-and-verify-in-tree
     steps:
-      - uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4
+      - uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # v4
         with:
           name: 'release-tgz'
 
@@ -94,7 +94,7 @@ jobs:
     timeout-minutes: 15
     needs: maketgz-and-verify-in-tree
     steps:
-      - uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4
+      - uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # v4
         with:
           name: 'release-tgz'
 
@@ -115,7 +115,7 @@ jobs:
     timeout-minutes: 15
     needs: maketgz-and-verify-in-tree
     steps:
-      - uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4
+      - uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # v4
         with:
           name: 'release-tgz'
 
@@ -136,7 +136,7 @@ jobs:
         with:
           persist-credentials: false
 
-      - uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4
+      - uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # v4
         with:
           name: 'release-tgz'