Build(deps): Bump actions/download-artifact to 8.0.1 (#773)

Validated release workflow inputs, signing boundaries, full SHA pins, and exact-head required CI checks. v8 enforces artifact digest mismatches as errors; no workflow input migration required. AI-assisted dependency review and validation by Codex.
This commit is contained in:
dependabot[bot]
2026-09-07 10:05:05 -07:00
committed by GitHub
parent dbdc470e70
commit 731e2b1e67
+2 -2
View File
@@ -70,7 +70,7 @@ jobs:
steps:
# A fresh runner signs only this run's engine. It does not check out or
# execute repository code with the Azure identity available.
- uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
- uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
with:
name: unsigned-windows-x64
path: unsigned
@@ -124,7 +124,7 @@ jobs:
permissions:
contents: write
steps:
- uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
- uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
with:
pattern: impeccable-*
path: artifacts