diff --git a/.github/workflows/10_build-validation.yml b/.github/workflows/10_build-validation.yml
index d153733..c172af5 100644
--- a/.github/workflows/10_build-validation.yml
+++ b/.github/workflows/10_build-validation.yml
@@ -62,21 +62,21 @@ jobs:
         [[ $NUM_REPO_SDK -ne 0 ]] & echo "sdk repo existing!"
 
     - name: upload repo.binary
-      uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7
+      uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
       with:
         name: repo.binary
         path: releng/repo.binary/target/repo.binary-*.zip
         if-no-files-found: warn
 
     - name: upload repo.sdk
-      uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7
+      uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
       with:
         name: repo.sdk
         path: releng/repo.sdk/target/repo.sdk-*.zip
         if-no-files-found: warn
 
     - name: upload repo.products
-      uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7
+      uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
       with:
         name: repo.products
         path: releng/products/target/**/**/products-*.zip
@@ -218,7 +218,7 @@ jobs:
 
     - name: Upload Eclipse runtime logs
       if: always()
-      uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7
+      uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
       with:
         name: eclipse-runtime-logs
         path: .ci-eclipse-logs/**
@@ -226,7 +226,7 @@ jobs:
 
     - name: upload styled test and coverage reports
       if: always()
-      uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7
+      uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
       with:
         name: ci-reports-styled
         path: .ci-reports/**
@@ -234,147 +234,147 @@ jobs:
 
     - name: upload coverage html
       if: always()
-      uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7
+      uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
       with:
         name: coverage-html
         path: tests/example.rcp.tests.reports/target/site/**
         if-no-files-found: warn
 
     - name: upload feature-product linux x86_64
-      uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7
+      uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
       with:
         name: example.rcp.app.ui.feature.product-linux.gtk.x86_64
         path: releng/products/target/**/**/example.rcp.app.ui.feature.product-*linux.gtk.x86_64.zip
         if-no-files-found: warn
 
     - name: upload feature-product linux aarch64
-      uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7
+      uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
       with:
         name: example.rcp.app.ui.feature.product-linux.gtk.aarch64
         path: releng/products/target/**/example.rcp.app.ui.feature.product-*linux.gtk.aarch64.zip
         if-no-files-found: warn
 
     - name: upload feature-product macosx x86_64
-      uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7
+      uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
       with:
         name: example.rcp.app.ui.feature.product-macosx.cocoa.x86_64
         path: releng/products/target/**/example.rcp.app.ui.feature.product-*macosx.cocoa.x86_64.tar.gz
         if-no-files-found: warn
 
     - name: upload feature-product macosx aarch64
-      uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7
+      uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
       with:
         name: example.rcp.app.ui.feature.product-macosx.cocoa.aarch64
         path: releng/products/target/**/example.rcp.app.ui.feature.product-*macosx.cocoa.aarch64.tar.gz
         if-no-files-found: warn
 
     - name: upload feature-product win32 x86_64
-      uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7
+      uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
       with:
         name: example.rcp.app.ui.feature.product-win32.win32.x86_64
         path: releng/products/target/**/example.rcp.app.ui.feature.product-*win32.win32.x86_64.zip
         if-no-files-found: warn
 
     - name: upload plugin-product linux x86_64
-      uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7
+      uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
       with:
         name: example.rcp.app.ui.plugin.product-linux.gtk.x86_64
         path: releng/products/target/**/example.rcp.app.ui.plugin.product-*linux.gtk.x86_64.zip
         if-no-files-found: warn
 
     - name: upload plugin-product linux aarch64
-      uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7
+      uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
       with:
         name: example.rcp.app.ui.plugin.product-linux.gtk.aarch64
         path: releng/products/target/**/example.rcp.app.ui.plugin.product-*linux.gtk.aarch64.zip
         if-no-files-found: warn
 
     - name: upload plugin-product macosx x86_64
-      uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7
+      uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
       with:
         name: example.rcp.app.ui.plugin.product-macosx.cocoa.x86_64
         path: releng/products/target/**/example.rcp.app.ui.plugin.product-*macosx.cocoa.x86_64.tar.gz
         if-no-files-found: warn
 
     - name: upload plugin-product macosx aarch64
-      uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7
+      uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
       with:
         name: example.rcp.app.ui.plugin.product-macosx.cocoa.aarch64
         path: releng/products/target/**/example.rcp.app.ui.plugin.product-*macosx.cocoa.aarch64.tar.gz
         if-no-files-found: warn
 
     - name: upload plugin-product win32 x86_64
-      uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7
+      uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
       with:
         name: example.rcp.app.ui.plugin.product-win32.win32.x86_64
         path: releng/products/target/**/example.rcp.app.ui.plugin.product-*win32.win32.x86_64.zip
         if-no-files-found: warn
 
     - name: upload mixed-product linux x86_64
-      uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7
+      uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
       with:
         name: example.rcp.app.ui.mixed.product-linux.gtk.x86_64
         path: releng/products/target/**/example.rcp.app.ui.mixed.product-*linux.gtk.x86_64.zip
         if-no-files-found: warn
 
     - name: upload mixed-product linux aarch64
-      uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7
+      uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
       with:
         name: example.rcp.app.ui.mixed.product-linux.gtk.aarch64
         path: releng/products/target/**/example.rcp.app.ui.mixed.product-*linux.gtk.aarch64.zip
         if-no-files-found: warn
 
     - name: upload mixed-product macosx x86_64
-      uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7
+      uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
       with:
         name: example.rcp.app.ui.mixed.product-macosx.cocoa.x86_64
         path: releng/products/target/**/example.rcp.app.ui.mixed.product-*macosx.cocoa.x86_64.tar.gz
         if-no-files-found: warn
 
     - name: upload mixed-product macosx aarch64
-      uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7
+      uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
       with:
         name: example.rcp.app.ui.mixed.product-macosx.cocoa.aarch64
         path: releng/products/target/**/example.rcp.app.ui.mixed.product-*macosx.cocoa.aarch64.tar.gz
         if-no-files-found: warn
 
     - name: upload mixed-product win32 x86_64
-      uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7
+      uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
       with:
         name: example.rcp.app.ui.mixed.product-win32.win32.x86_64
         path: releng/products/target/**/example.rcp.app.ui.mixed.product-*win32.win32.x86_64.zip
         if-no-files-found: warn
 
     - name: upload headless-product linux x86_64
-      uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7
+      uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
       with:
         name: example.rcp.headless.feature.product-linux.gtk.x86_64
         path: releng/products/target/**/example.rcp.headless.feature.product-*linux.gtk.x86_64.zip
         if-no-files-found: warn
 
     - name: upload headless-product linux aarch64
-      uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7
+      uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
       with:
         name: example.rcp.headless.feature.product-linux.gtk.aarch64
         path: releng/products/target/**/example.rcp.headless.feature.product-*linux.gtk.aarch64.zip
         if-no-files-found: warn
 
     - name: upload headless-product macosx x86_64
-      uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7
+      uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
       with:
         name: example.rcp.headless.feature.product-macosx.cocoa.x86_64
         path: releng/products/target/**/example.rcp.headless.feature.product-*macosx.cocoa.x86_64.tar.gz
         if-no-files-found: warn
 
     - name: upload headless-product macosx aarch64
-      uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7
+      uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
       with:
         name: example.rcp.headless.feature.product-macosx.cocoa.aarch64
         path: releng/products/target/**/example.rcp.headless.feature.product-*macosx.cocoa.aarch64.tar.gz
         if-no-files-found: warn
 
     - name: upload headless-product win32 x86_64
-      uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7
+      uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
       with:
         name: example.rcp.headless.feature.product-win32.win32.x86_64
         path: releng/products/target/**/example.rcp.headless.feature.product-*win32.win32.x86_64.zip
diff --git a/.github/workflows/40_product-validation.yml b/.github/workflows/40_product-validation.yml
index ac76a4a..09361a8 100644
--- a/.github/workflows/40_product-validation.yml
+++ b/.github/workflows/40_product-validation.yml
@@ -459,7 +459,7 @@ jobs:
     # ----------------------------------------------------------------
     - name: upload product logs
       if: always()
-      uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7
+      uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
       with:
         name: product-logs-${{ matrix.platform }}
         path: products/**/*.log