Merge pull request #29 from dnv-opensource/fix_for_vulnerability_GHSA…

…_cxww_7g56_2vh6_reported_by_github_on_20240903 Fix for vulnerability GHSA-cxww-7g56-2vh6 reported by GitHub on 2024-09-03
dnv-opensource · Sep 4, 2024 · dc3181a · dc3181a
2 parents dbeda1c + e0bef00
commit dc3181a
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 1 deletion.
diff --git a/.github/workflows/_publish_package.yml b/.github/workflows/_publish_package.yml
@@ -10,7 +10,7 @@ jobs:
     permissions:
       id-token: write
     steps:
-      - uses: actions/download-artifact@v3
+      - uses: actions/download-artifact@v4
         with:
           name: artifact
           path: ./dist/

diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -5,6 +5,9 @@ The changelog format is based on [Keep a Changelog](https://keepachangelog.com/e
 
 ## [Unreleased]
 
+### Dependencies
+* Updated to download-artifact@v4  (from download-artifact@v3)
+
 ### Dependencies
 * GitHub workflows: Replaced pip install tox with pip install tox-uv
 * GitHub workflows: Removed cache: 'pip' for tox-uv compatibility