fix: bumped GitHub actions download-artifact to v4.1.8 in generate sbom job (#379)

* bump go-git to 5.13.1

Signed-off-by: reggie-k <[email protected]>

* bump GitHub actions upload-artifact to v4.4.0 in binaries job

Signed-off-by: reggie-k <[email protected]>

* bump GitHub actions upload-artifact to v4.4.0 in binaries job

Signed-off-by: reggie-k <[email protected]>

* updated changelog

Signed-off-by: reggie-k <[email protected]>

* updated changelog

Signed-off-by: reggie-k <[email protected]>

* bumped download-artifact and updated changelog

Signed-off-by: reggie-k <[email protected]>

---------

Signed-off-by: reggie-k <[email protected]>

Author: reggie-k

.github/workflows/release.yaml

@@ -321,7 +321,7 @@ jobs:
           cd /tmp && tar -zcf sbom.tar.gz *.spdx
         if: ${{ env.DRY_RUN != 'true' }}
 
-      - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
+      - uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
         with:
           name: ${{ needs.binaries.outputs.ARTIFACT_NAME }}
 

changelog/CHANGELOG.md

@@ -1,3 +1,2 @@
 ### Features
-- fix(argo-cd): bumped go-git to 5.13.1
-- fix(release): bumped GitHub actions upload-artifact to v4.4.0 in binaries job
+- fix(release): bumped GitHub actions download-artifact to v4.1.8 in generate sbom job