ci: upgrade action-download-artifact

The current version has an artifact poisoning vulnerability - see https://github.com/TinyTapeout/tinytapeout-10/security/dependabot/2 for details
TinyTapeout · Dec 2, 2024 · 6a35417 · 6a35417
1 parent 09b69e1
commit 6a35417
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/.github/workflows/efabless_tapeout.yaml b/.github/workflows/efabless_tapeout.yaml
@@ -13,7 +13,7 @@ jobs:
 
     steps:
       - name: Download artifact
-        uses: dawidd6/action-download-artifact@v3
+        uses: dawidd6/action-download-artifact@v6
         id: download_artifact
         with:
           workflow: gds.yaml

diff --git a/.github/workflows/precheck.yaml b/.github/workflows/precheck.yaml
@@ -38,7 +38,7 @@ jobs:
           pdk_root: ${{ env.PDK_ROOT }}
 
       - name: Download artifact (run id = ${{ github.event.workflow_run.id }})
-        uses: dawidd6/action-download-artifact@v3
+        uses: dawidd6/action-download-artifact@v6
         id: download_artifact
         with:
           workflow: gds.yaml
@@ -122,7 +122,7 @@ jobs:
           pdk_root: ${{ env.PDK_ROOT }}
 
       - name: Download artifact (run id = ${{ github.event.workflow_run.id }})
-        uses: dawidd6/action-download-artifact@v3
+        uses: dawidd6/action-download-artifact@v6
         id: download_artifact
         with:
           workflow: gds.yaml