diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 4a59a71..74831b8 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -95,7 +95,7 @@ jobs:
       - name: Generate CycloneDX SBOM from locked requirements
         run: |
           uv run cyclonedx-py requirements requirements.txt --of json -o sbom.cdx.json
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@v7
         with:
           name: sbom
           path: sbom.cdx.json
@@ -123,7 +123,7 @@ jobs:
         run: twine check dist/*
 
       - name: Upload build artifacts
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: dist
           path: dist/
@@ -204,7 +204,7 @@ jobs:
         run: bandit -r cli/ -f json -o bandit-report.json || true
 
       - name: Upload security report
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: security-report
           path: bandit-report.json
diff --git a/.github/workflows/understand-first-commenter.yml b/.github/workflows/understand-first-commenter.yml
index 826905a..52f8424 100644
--- a/.github/workflows/understand-first-commenter.yml
+++ b/.github/workflows/understand-first-commenter.yml
@@ -190,7 +190,7 @@ jobs:
           "
 
       - name: Upload analysis artifacts
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v7
         with:
           name: understand-first-pr-analysis-${{ github.event.number || github.event.inputs.pr_number }}
           path: |
diff --git a/.github/workflows/understand-first-pr-analysis.yml b/.github/workflows/understand-first-pr-analysis.yml
index 6ae4116..c73007d 100644
--- a/.github/workflows/understand-first-pr-analysis.yml
+++ b/.github/workflows/understand-first-pr-analysis.yml
@@ -89,7 +89,7 @@ jobs:
           echo "Policy check exit code: $POLICY_EXIT_CODE"
 
       - name: Upload analysis artifacts
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v7
         with:
           name: understand-first-analysis
           path: |
diff --git a/.github/workflows/understand-first.yml b/.github/workflows/understand-first.yml
index 8932f11..b078452 100644
--- a/.github/workflows/understand-first.yml
+++ b/.github/workflows/understand-first.yml
@@ -166,7 +166,7 @@ jobs:
           git stash pop
 
       - name: Upload Analysis Artifacts
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v7
         with:
           name: understand-first-analysis
           path: |
@@ -178,7 +178,7 @@ jobs:
 
       - name: Upload Code Map Delta
         if: steps.diff.outputs.changes_detected == 'true'
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v7
         with:
           name: code-map-delta
           path: maps/delta.svg
@@ -186,7 +186,7 @@ jobs:
 
       - name: Upload Understanding Tour
         if: steps.lens.outputs.lens_created == 'true'
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v7
         with:
           name: understanding-tour
           path: tours/pr-tour.md
@@ -194,7 +194,7 @@ jobs:
 
       - name: Upload Context Debt Dashboard
         if: steps.lens.outputs.lens_created == 'true'
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v7
         with:
           name: context-debt-dashboard
           path: context-debt-dashboard.html