diff --git a/.gitea/workflows/release-gates.yml b/.gitea/workflows/release-gates.yml
index 91232c61..2abcd2c4 100644
--- a/.gitea/workflows/release-gates.yml
+++ b/.gitea/workflows/release-gates.yml
@@ -58,7 +58,7 @@ jobs:
           docker compose config > artifacts/docker-compose.resolved.yml
       - name: Publish quality evidence
         if: always()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v3.2.2-node20
         with:
           name: quality-evidence
           path: |
@@ -95,7 +95,7 @@ jobs:
           npm audit --audit-level=high --json > ../artifacts/npm-audit.json
       - name: Publish dependency evidence
         if: always()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v3.2.2-node20
         with:
           name: dependency-audits
           path: |
@@ -135,7 +135,7 @@ jobs:
         run: bash scripts/scan_container_image.sh "geointel-ci:$RELEASE_SHA-gis"
       - name: Publish container evidence
         if: always()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v3.2.2-node20
         with:
           name: container-evidence
           path: |
diff --git a/frontend/package-lock.json b/frontend/package-lock.json
index 05d2ae3e..cf28d785 100644
--- a/frontend/package-lock.json
+++ b/frontend/package-lock.json
@@ -2530,9 +2530,9 @@
       "license": "MIT"
     },
     "node_modules/nanoid": {
-      "version": "3.3.16",
-      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.16.tgz",
-      "integrity": "sha512-bzlKTyNJ7+LdGIIwy8ijFpIqEQIvafahV7eYykJ8Cvh42EdJeODoJ6gUJXpQJvej1BddH8OqTXZNE/KfbWAu8Q==",
+      "version": "3.3.18",
+      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.18.tgz",
+      "integrity": "sha512-DTg4MJbGMWkfi6VZFdNt2/caMbQy4Ou+Op/hJQvGEWcnVfoA1QA+xzRKAzw9jD6+GVOOeYr/mIcuDSdug6F6+w==",
       "dev": true,
       "funding": [
         {