Pin actions/download-artifact and upload-artifact to patched versions

Co-authored-by: adityapatwardhan <12820925+adityapatwardhan@users.noreply.github.com>

Author: Copilot

.github/workflows/ci.yml

@@ -111,7 +111,7 @@ jobs:
           "name=$($config.ModuleName)" >> $env:GITHUB_OUTPUT
 
       - name: Upload module artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
         with:
           name: ${{ steps.module-path.outputs.name }}
           path: ${{ steps.module-path.outputs.path }}
@@ -177,7 +177,7 @@ jobs:
 
       # ADO: task DownloadBuildArtifacts@0
       - name: Download artifacts
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0 (fixes arbitrary file write vuln, patched >=4.1.3)
         with:
           name: Microsoft.PowerShell.PSResourceGet
           path: ${{ runner.temp }}/artifacts
@@ -409,7 +409,7 @@ jobs:
 
       # ADO: task DownloadBuildArtifacts@0
       - name: Download artifacts
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0 (fixes arbitrary file write vuln, patched >=4.1.3)
         with:
           name: Microsoft.PowerShell.PSResourceGet
           path: ${{ runner.temp }}/artifacts