Merge pull request #1455 from sigstore/dependabot/github_actions/acti…

…ons-8f3a61e048 build(deps): Bump actions/download-artifact from 4.1.8 to 4.1.9 in the actions group
sigstore · Feb 26, 2025 · 8f2dd27 · 8f2dd27
2 parents 055dad6 + 06bdcf9
commit 8f2dd27
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 4 deletions.
diff --git a/.github/workflows/custom-test.yml b/.github/workflows/custom-test.yml
@@ -125,7 +125,7 @@ jobs:
         run: curl -o root.json ${METADATA_URL}/5.root.json
 
       - name: Download bundle to verify
-        uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
+        uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # v4.1.9
         with:
           name: bundle
 
@@ -154,7 +154,7 @@ jobs:
         run: curl -o root.json ${METADATA_URL}/1.root.json
 
       - name: Download bundle to verify
-        uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
+        uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # v4.1.9
         with:
           name: bundle
 
@@ -197,7 +197,7 @@ jobs:
           tar -xvf sigstore-cli/build/distributions/sigstore-cli-*.tar --strip-components 1
 
       - name: Download bundle to verify
-        uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
+        uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # v4.1.9
         with:
           name: bundle
 

diff --git a/.github/workflows/deploy-to-gcs.yml b/.github/workflows/deploy-to-gcs.yml
@@ -12,7 +12,7 @@ jobs:
       id-token: 'write' # For authenticating with the GitHub workflow identity
 
     steps:
-      - uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
+      - uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # v4.1.9
         with:
           name: github-pages