github: pin download/upload artifacts to v4

freifunkMUC · Jan 13, 2025 · 8d68a61 · 8d68a61
1 parent 2002866
commit 8d68a61
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/.github/workflows/firmware.yml b/.github/workflows/firmware.yml
@@ -62,7 +62,7 @@ jobs:
           make BROKEN=1 GLUON_TARGETS=${{ matrix.target }} BUILD_NUMBER=${{ github.event.pull_request.number && format('pr{0}', github.event.pull_request.number) || github.run_id && format('run{0}', github.run_id) }} V=s
           echo "status=success" >> $GITHUB_OUTPUT
       - name: Upload firmware ${{ matrix.target }}
-        uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3
+        uses: actions/upload-artifact@v4  # v4
         if: steps.compile.outputs.status == 'success'
         with:
           name: ${{ matrix.target }}_output
@@ -75,7 +75,7 @@ jobs:
     if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags/v')
     steps:
       - name: Download all artifacts
-        uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e # v4.1.7
+        uses: actions/download-artifact@v4  # v4
       - name: Display structure of artifacts
         run: ls -R
       - name: Create tar.gz files