From 6df22adc4b976d0c47032a78d8d42573b4c12827 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 13 Oct 2026 01:34:11 +0000 Subject: [PATCH] =?UTF-8?q?=E2=AC=86=20Bump=20actions/download-artifact=20?= =?UTF-8?q?from=208.0.1=20to=208.0.2?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 8.0.1 to 8.0.2. - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](https://github.com/actions/download-artifact/compare/3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c...9000827ccba6bdab643e8b6fd33ac0654aef8333) --- updated-dependencies: - dependency-name: actions/download-artifact dependency-version: 8.0.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- .github/workflows/documentation.yaml | 2 +- .github/workflows/release-python.yml | 4 ++-- .github/workflows/rw_run_all_test_and_record.yaml | 2 +- 3 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/documentation.yaml b/.github/workflows/documentation.yaml index fc952e83..2c9745f4 100644 --- a/.github/workflows/documentation.yaml +++ b/.github/workflows/documentation.yaml @@ -208,7 +208,7 @@ jobs: # PEP-440 pyproject version, which loses the canonical tag form). Pull it # so the deploy script can label the frozen snapshot and pick the channel. - name: Download release-tag artifact from the release run - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8 + uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8 with: name: release-tag path: release-tag-artifact diff --git a/.github/workflows/release-python.yml b/.github/workflows/release-python.yml index 6b4a8d8e..d11ebe38 100644 --- a/.github/workflows/release-python.yml +++ b/.github/workflows/release-python.yml @@ -605,7 +605,7 @@ jobs: id-token: write # OIDC token for Trusted Publisher steps: - name: Download all build artifacts - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8 + uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8 with: pattern: wheels-* path: dist @@ -646,7 +646,7 @@ jobs: - name: Download CycloneDX SBOM # AAASM-3615: pull the SBOM built by the `sbom` job so it can be # attached to the Release below. - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8 + uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8 with: name: sbom - name: Create tag and GitHub Release diff --git a/.github/workflows/rw_run_all_test_and_record.yaml b/.github/workflows/rw_run_all_test_and_record.yaml index a459cd4c..25a766ab 100644 --- a/.github/workflows/rw_run_all_test_and_record.yaml +++ b/.github/workflows/rw_run_all_test_and_record.yaml @@ -172,7 +172,7 @@ jobs: fetch-depth: 0 - name: Download all-test coverage XML report - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8 + uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8 with: name: all-test_coverage_xml_report path: ./