diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
index b247adef..a5b23d4c 100644
--- a/.github/workflows/publish.yaml
+++ b/.github/workflows/publish.yaml
@@ -42,7 +42,7 @@ jobs:
                   zip -r "jellyfin-chromecast.zip" "jellyfin-chromecast"
 
             - name: Upload artifacts
-              uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3
+              uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0
               with:
                   name: jellyfin-chromecast
                   path: jellyfin-chromecast.zip
@@ -77,7 +77,7 @@ jobs:
                   asset_paths: '["jellyfin-chromecast.zip"]'
 
             - name: Upload release archive to repo.jellyfin.org
-              uses: burnett01/rsync-deployments@796cf0d5e4b535745ce49d7429f77cf39e25ef39 # 7.0.1
+              uses: burnett01/rsync-deployments@3cccb6851148e6198ed9ed89eb0d1c17b5e58cc7 # 7.0.2
               with:
                   switches: -vrptz
                   path: jellyfin-chromecast.zip
@@ -119,7 +119,7 @@ jobs:
               run: unzip jellyfin-chromecast.zip -d .
 
             - name: Deploy to apps1.jellyfin.org/chromecast/nightly
-              uses: burnett01/rsync-deployments@796cf0d5e4b535745ce49d7429f77cf39e25ef39 # 7.0.1
+              uses: burnett01/rsync-deployments@3cccb6851148e6198ed9ed89eb0d1c17b5e58cc7 # 7.0.2
               with:
                   switches: -vrptz
                   path: jellyfin-chromecast/
@@ -130,7 +130,7 @@ jobs:
 
             - name: Deploy to apps1.jellyfin.org/chromecast/stable
               if: ${{ startsWith(github.ref, 'refs/tags') }}
-              uses: burnett01/rsync-deployments@796cf0d5e4b535745ce49d7429f77cf39e25ef39 # 7.0.1
+              uses: burnett01/rsync-deployments@3cccb6851148e6198ed9ed89eb0d1c17b5e58cc7 # 7.0.2
               with:
                   switches: -vrptz
                   path: jellyfin-chromecast/