Build(deps): Bump actions/download-artifact from 8.0.1 to 8.0.2 in the github-actions group across 1 directory

.github/workflows/ci.yml

@@ -1,3 +1,3 @@
 name: CI
 
 on:
@@ -167,7 +167,7 @@
         run: python -m pip install --require-hashes --requirement constraints/dev.txt
 
       - name: Download coverage fragments
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
+        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333
         with:
           pattern: coverage-*
           path: coverage-fragments

.github/workflows/release-advisory-verify.yml

@@ -1,3 +1,3 @@
 name: Advisory Release Verification
 
 # Read-only verification of an advisory release candidate (#648). Called by
@@ -314,7 +314,7 @@
         run: python -m pytest tests/test_adapter_static_only.py -q
 
       - name: Download the shards' evidence
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
+        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333
         with:
           pattern: release-suite-evidence-*
           path: suite-evidence

.github/workflows/release-engine-smoke.yml

@@ -1,3 +1,3 @@
 name: Release Engine Smoke (unqualified)
 
 # Distribution evidence only: no publishing, qualification promotion, signing
@@ -65,7 +65,7 @@
       - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97
         with:
           python-version: "3.12"
-      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
+      - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333
         with:
           name: unqualified-engine-wheel
           path: .shipgate-smoke/wheels

.github/workflows/release-preview.yml

@@ -1,3 +1,3 @@
 name: Release Preview (unqualified)
 
 # The unqualified preview channel approved in
@@ -285,7 +285,7 @@
         # candidate code and reads no candidate text: the release body below
         # is written by this file, at the dispatched revision, and cannot be
         # influenced by anything the build produced.
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
+        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333
         with:
           name: preview-${{ needs.build.outputs.version }}
           path: dist

.github/workflows/release-verify.yml

@@ -1,3 +1,3 @@
 name: Release Verification
 
 # Read-only verification of a release candidate. Called by release.yml (before
@@ -313,7 +313,7 @@
         run: python -m pytest tests/test_adapter_static_only.py -q
 
       - name: Download the shards' evidence
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
+        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333
         with:
           pattern: release-suite-evidence-*
           path: suite-evidence

.github/workflows/release.yml

@@ -1,3 +1,3 @@
 name: Release
 
 on:
@@ -239,7 +239,7 @@
           echo "REHEARSAL_RUN_ID=${run_id}" >> "${GITHUB_ENV}"
 
       - name: Download verified candidate
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
+        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333
         with:
           name: ${{ needs.candidate.outputs.artifact_name }}
           path: dist
@@ -491,7 +491,7 @@
           fi
 
       - name: Download verified candidate
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
+        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333
         with:
           name: ${{ needs.candidate.outputs.artifact_name }}
           path: dist
@@ -674,13 +674,13 @@
           fi
 
       - name: Download verified candidate
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
+        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333
         with:
           name: ${{ needs.candidate.outputs.artifact_name }}
           path: dist
 
       - name: Download signatures
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
+        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333
         with:
           name: release-signatures-${{ needs.candidate.outputs.release_tag }}
           path: signatures