From 339cb5da8a7fe9d6f8e99f319399e28e4b333cc4 Mon Sep 17 00:00:00 2001 From: Renan Rodrigo Date: Wed, 4 Sep 2024 08:50:22 -0300 Subject: [PATCH] ci: bump actions/[download,upload]-artifact version This mitigates CVE-2024-42471 Signed-off-by: Renan Rodrigo --- .github/workflows/ci-integration.yaml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/ci-integration.yaml b/.github/workflows/ci-integration.yaml index ae54c306c8..6e2e90a2ff 100644 --- a/.github/workflows/ci-integration.yaml +++ b/.github/workflows/ci-integration.yaml @@ -56,7 +56,7 @@ jobs: sg sbuild -c "sbuild --dist='${{ matrix.release }}' --resolve-alternatives --no-clean-source --nolog --verbose --no-run-lintian --build-dir='${{ runner.temp }}'" mv ../*.deb '${{ runner.temp }}' # Workaround for Debbug: #990734, drop in Jammy - name: Archive debs as artifacts - uses: actions/upload-artifact@v3 + uses: actions/upload-artifact@v4 with: name: 'ci-debs-${{ matrix.release }}' path: '${{ runner.temp }}/*.deb' @@ -109,7 +109,7 @@ jobs: - name: Git checkout uses: actions/checkout@v3 - name: Retrieve debs - uses: actions/download-artifact@v3 + uses: actions/download-artifact@v4.1.7 with: name: 'ci-debs-${{ matrix.release }}' path: '${{ runner.temp }}' @@ -155,7 +155,7 @@ jobs: sg lxd -c "tox -e behave -- -D machine_types=${{ matrix.platform }} -D releases=${{ matrix.release }} --tags=-slow --tags=-upgrade --tags=-no_gh --tags=-vpn" - name: Archive test artifacts if: always() - uses: actions/upload-artifact@v3 + uses: actions/upload-artifact@v4 with: name: 'ci-behave-${{ matrix.release }}' path: '${{ runner.temp }}/artifacts/behave*'