diff --git a/.github/workflows/npm-publish.yml b/.github/workflows/npm-publish.yml
index f564939..61eabac 100644
--- a/.github/workflows/npm-publish.yml
+++ b/.github/workflows/npm-publish.yml
@@ -61,7 +61,7 @@ jobs:
           registry-url: https://registry.npmjs.org/
 
       - name: Download tarball
-        uses: actions/download-artifact@7a1cd3216ca9260cd8022db641d960b1db4d1be4 # v4
+        uses: actions/download-artifact@f44cd7b40bfd40b6aa1cc1b9b5b7bf03d3c67110 # v4
         with:
           name: package