From fdef6071375470c71a36ac154f42e070230795be Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 19 May 2026 10:01:33 +0000
Subject: [PATCH] deps(deps): bump actions/download-artifact from 4.3.0 to
 8.0.1

Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 4.3.0 to 8.0.1.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](https://github.com/actions/download-artifact/compare/d3f86a106a0bac45b974a628896c90dbdf5c8093...3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: 8.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/branch-preview.yaml     |  6 +++---
 .github/workflows/push.yaml               | 10 +++++-----
 .github/workflows/verify-attestations.yml |  2 +-
 3 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/.github/workflows/branch-preview.yaml b/.github/workflows/branch-preview.yaml
index 0a7bc335..6d729865 100644
--- a/.github/workflows/branch-preview.yaml
+++ b/.github/workflows/branch-preview.yaml
@@ -316,7 +316,7 @@ jobs:
         with:
           persist-credentials: false
       - name: download ${{ matrix.target }} binary
-        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093  # v4.3.0
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c  # v8.0.1
         with:
           name: ${{ matrix.target }}-binary
           path: dist
@@ -414,12 +414,12 @@ jobs:
         with:
           persist-credentials: false
       - name: download all sc platform artifacts
-        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093  # v4.3.0
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c  # v8.0.1
         with:
           path: artifacts
           pattern: sc-*
       - name: download bin tools artifact
-        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093  # v4.3.0
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c  # v8.0.1
         with:
           name: bin-tools
           path: bin
diff --git a/.github/workflows/push.yaml b/.github/workflows/push.yaml
index 98ff4a19..198398c8 100644
--- a/.github/workflows/push.yaml
+++ b/.github/workflows/push.yaml
@@ -426,13 +426,13 @@ jobs:
           persist-credentials: false
       - name: download github-actions binary
         if: matrix.image == 'github-actions'
-        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093  # v4.3.0
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c  # v8.0.1
         with:
           name: github-actions-binary
           path: dist
       - name: download cloud-helpers binary
         if: matrix.image == 'cloud-helpers-aws'
-        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093  # v4.3.0
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c  # v8.0.1
         with:
           name: cloud-helpers-binary
           path: dist
@@ -555,7 +555,7 @@ jobs:
           EOF
           sc secrets reveal
       - name: download sc tarball artifacts
-        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093  # v4.3.0
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c  # v8.0.1
         with:
           # Filter to sc-* artifacts only — without a pattern, this step
           # also pulls the build-push-action's internal `*.dockerbuild`
@@ -569,14 +569,14 @@ jobs:
           pattern: sc-*
           path: artifacts
       - name: download bin tools artifact
-        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093  # v4.3.0
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c  # v8.0.1
         with:
           name: bin-tools
           path: bin
       - name: fix bin tools permissions
         run: chmod +x bin/*
       - name: download docs artifact
-        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093  # v4.3.0
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c  # v8.0.1
         with:
           name: docs-site
           path: docs/site
diff --git a/.github/workflows/verify-attestations.yml b/.github/workflows/verify-attestations.yml
index f34cf950..28586387 100644
--- a/.github/workflows/verify-attestations.yml
+++ b/.github/workflows/verify-attestations.yml
@@ -120,7 +120,7 @@ jobs:
         id: download_digests
         if: github.event_name == 'workflow_run'
         continue-on-error: true
-        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093  # v4.3.0
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c  # v8.0.1
         with:
           pattern: image-digest-*
           path: image-digests