diff --git a/.github/workflows/agent-team-apply-verify.yml b/.github/workflows/agent-team-apply-verify.yml
index 9caaea0..3bf06cd 100644
--- a/.github/workflows/agent-team-apply-verify.yml
+++ b/.github/workflows/agent-team-apply-verify.yml
@@ -208,7 +208,7 @@ jobs:
             *.actions.githubusercontent.com:443
 
       - name: Download candidate diff (data only; not applied)
-        uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           name: ${{ inputs.diff_artifact_name }}
           path: ./_incoming
@@ -632,7 +632,7 @@ jobs:
           persist-credentials: false
 
       - name: Re-download candidate diff (re-validated below)
-        uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           name: ${{ inputs.diff_artifact_name }}
           path: ./_incoming