From 03469f6f6e3b360d7642c71310fabcedc272ecac Mon Sep 17 00:00:00 2001 From: Nicolas Legrand Date: Thu, 5 Sep 2024 14:40:16 +0200 Subject: [PATCH] Fix security vulnerability from download-artifact --- .github/workflows/pypi.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/pypi.yml b/.github/workflows/pypi.yml index eb99669..25340e8 100644 --- a/.github/workflows/pypi.yml +++ b/.github/workflows/pypi.yml @@ -41,7 +41,7 @@ jobs: id-token: write # IMPORTANT: mandatory for trusted publishing steps: - name: Download all the dists - uses: actions/download-artifact@v3 + uses: actions/download-artifact@v4 with: name: python-package-distributions path: dist/