fix: pin SHA for artifact actions

Author: clementb49

.github/workflows/build_app.yml

@@ -92,14 +92,14 @@ jobs:
           echo "  language: auto" >> dist\user_data\config.yml
           echo "  log_level: info" >> dist\user_data\config.yml
       - name: create and upload portable zip
-        uses: actions/upload-artifact@v7
+        uses: "actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a"
         with:
           name: portable_basiliskLLM_${{ steps.get_variables.outputs.version_number }}_${{ runner.os }}_${{ steps.get_variables.outputs.arch }}
           path: ${{ github.workspace }}/repo/dist/*
           if-no-files-found: error
           retention-days: 30
       - name: upload installer
-        uses: actions/upload-artifact@v7
+        uses: "actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a"
         with:
           name: setup_basiliskLLM_${{ steps.get_variables.outputs.version_number }}_${{ runner.os }}_${{ steps.get_variables.outputs.arch }}
           path: ${{ github.workspace }}/repo/output_setup/*

.github/workflows/create_release.yml

@@ -18,7 +18,7 @@ jobs:
         id: get_release_name
         run: echo "release_name=$(echo ${{ inputs.ref_name }} | cut -c 2-) ($(date '+%Y-%m-%d'))" >> "$GITHUB_OUTPUT"
       - name: download app portable
-        uses: actions/download-artifact@v8
+        uses: "actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c"
         with:
           pattern: portable_basiliskLLM_*
           path: portable_app
@@ -33,13 +33,13 @@ jobs:
             echo "::endgroup::"
           done
       - name: download app installer
-        uses: actions/download-artifact@v8
+        uses: "actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c"
         with:
           pattern: setup_basiliskLLM_*
           path: installer
           merge-multiple: true
       - name: download POT file
-        uses: actions/download-artifact@v8
+        uses: "actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c"
         with:
           name: basiliskLLM.pot
       - name: create release

.github/workflows/localization.yml

@@ -31,7 +31,7 @@ jobs:
       - name: build POT file
         run: uv run setup.py extract_messages
       - name: upload POT file
-        uses: actions/upload-artifact@v7
+        uses: "actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a"
         with:
           name: basiliskLLM.pot
           path: basiliskLLM.pot
@@ -49,7 +49,7 @@ jobs:
       - name: checkout repository
         uses: "actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd"
       - name: download translations template artifact
-        uses: actions/download-artifact@v8
+        uses: "actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c"
         with:
           name: basiliskLLM.pot
           path: ./translations