diff --git a/.github/workflows/vortex-test-docs.yml b/.github/workflows/vortex-test-docs.yml
index dc2606544..e1b08c985 100644
--- a/.github/workflows/vortex-test-docs.yml
+++ b/.github/workflows/vortex-test-docs.yml
@@ -68,7 +68,7 @@ jobs:
       # searching by name returns the most recent successful run across all
       # branches, which would pull a binary built from a different commit.
       - name: Download the binary artifact
-        uses: dawidd6/action-download-artifact@d63b86af1b34672e53c440b1b83979861906bad7 # v24
+        uses: dawidd6/action-download-artifact@634d83b91986fcec9be314054943fa5c976aeb0e # v25
         with:
           run_id: ${{ github.event.workflow_run.id }}
           name: ${{ env.BINARY_ARTIFACT }}
diff --git a/composer.json b/composer.json
index 633486f5f..a6073970c 100644
--- a/composer.json
+++ b/composer.json
@@ -12,8 +12,8 @@
         "drupal/coffee": "^2.0.1",
         "drupal/config_split": "^2.0.2",
         "drupal/config_update": "^2@alpha",
-        "drupal/core-composer-scaffold": "~11.4.7",
-        "drupal/core-recommended": "~11.4.7",
+        "drupal/core-composer-scaffold": "~11.4.8",
+        "drupal/core-recommended": "~11.4.8",
         "drupal/devel": "^5.5",
         "drupal/drupal_helpers": "^2.1.1",
         "drupal/environment_indicator": "^4.0.25",