From 42f1a2a683e9c2418e025f65c8a62eb75914c79c Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 14 Oct 2026 21:13:02 +0000
Subject: [PATCH] build(deps): bump actions/download-artifact from 8.0.1 to
 8.0.2

Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 8.0.1 to 8.0.2.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](https://github.com/actions/download-artifact/compare/3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c...9000827ccba6bdab643e8b6fd33ac0654aef8333)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: 8.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/release.yml | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 7fb2c8d..972e49a 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -160,12 +160,12 @@ jobs:
       contents: read
     steps:
       - name: Download unsigned Linux candidate
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
         with:
           name: unsigned-${{ needs.validate-source.outputs.version }}-${{ needs.validate-source.outputs.commit }}
           path: artifacts/unsigned
       - name: Download independent Windows rebuild
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
         with:
           name: rebuilt-${{ needs.validate-source.outputs.version }}-${{ needs.validate-source.outputs.commit }}
           path: artifacts/rebuilt
@@ -202,7 +202,7 @@ jobs:
           go-version: ${{ env.GO_VERSION }}
           cache: false
       - name: Download unsigned candidate
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
         with:
           name: unsigned-${{ needs.validate-source.outputs.version }}-${{ needs.validate-source.outputs.commit }}
           path: artifacts/unsigned
@@ -247,12 +247,12 @@ jobs:
           go-version: ${{ env.GO_VERSION }}
           cache: false
       - name: Download signed candidate
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
         with:
           name: signed-${{ needs.validate-source.outputs.version }}-${{ needs.validate-source.outputs.commit }}
           path: artifacts/signed
       - name: Download independent rebuild
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
         with:
           name: rebuilt-${{ needs.validate-source.outputs.version }}-${{ needs.validate-source.outputs.commit }}
           path: artifacts/rebuilt
@@ -301,7 +301,7 @@ jobs:
           go-version: ${{ env.GO_VERSION }}
           cache: false
       - name: Download verified signed candidate
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
         with:
           name: signed-${{ needs.validate-source.outputs.version }}-${{ needs.validate-source.outputs.commit }}
           path: artifacts/signed