ci: fix cve discovered in actions/download-artifact

Signed-off-by: wenxin.leong <[email protected]>
Infineon · Sep 4, 2024 · 5770bfe · 5770bfe
1 parent 63c6dd1
commit 5770bfe
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
@@ -50,7 +50,7 @@ jobs:
           sed -n `awk '/## \[${{ github.ref_name }}/{c++} c==1{ print NR; exit }' CHANGELOG.md`',$p' CHANGELOG.md > .CHANGELOG.md.tmp
           sed `awk '/## \[[x0-9]/{c++} c==2{ print NR; exit }' .CHANGELOG.md.tmp`',$d' .CHANGELOG.md.tmp > ${{ github.workspace }}-CHANGELOG.txt
       - name: 'Download artifacts'
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v4.1.6
         with:
           name: 'executed-test-scripts'
           path: ci-script-collection