From cd960e0b3533df93eaf32a4388e4ccb2f3a83945 Mon Sep 17 00:00:00 2001 From: n1ckyb Date: Mon, 10 Aug 2026 00:28:00 +0100 Subject: [PATCH] chore(deps): bump actions/download-artifact Rebuilt on the current RC. The branch previously carried an older ci.yml, and a pull_request run uses the workflow from the PR's own branch - so it ran a version that predated the no-token degrade handling and failed with '--from-parser-artifacts needs GH_TOKEN or GITHUB_TOKEN', which Dependabot PRs can never satisfy because they receive no repository secrets. Net change against the RC is the pinned SHA only. Co-Authored-By: Claude Opus 5 --- .github/workflows/publish.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index 57a8c75..5d99af9 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -251,7 +251,7 @@ jobs: with: persist-credentials: false - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v4.1.4 with: pattern: dist-* path: downloaded-dist/ @@ -316,7 +316,7 @@ jobs: with: persist-credentials: false - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v4.1.4 with: pattern: dist-* path: downloaded-dist/