Pin version of actions/download-artifact.

Author: fniephaus

.github/workflows/ni-layers.yml

@@ -105,7 +105,7 @@ jobs:
       - name: Checkout oracle/graal
         uses: actions/checkout@v4
       - name: Download GraalVM JDK build
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4.2.1
         with:
           name: graalvm
           path: .

.github/workflows/quarkus.yml

@@ -133,7 +133,7 @@ jobs:
     steps:
       - name: Download GraalVM JDK build
         if: startsWith(matrix.os-name, 'ubuntu')
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4.2.1
         with:
           name: graalvm
           path: .
@@ -154,7 +154,7 @@ jobs:
         run: ${QUARKUS_PATH}/.github/ci-prerequisites.sh
       - name: Download Maven Repo
         if: startsWith(matrix.os-name, 'ubuntu')
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4.2.1
         with:
           name: maven-repo
           path: .

.github/workflows/reachability-metadata.yml

@@ -110,7 +110,7 @@ jobs:
         with:
           repository: oracle/graalvm-reachability-metadata
       - name: Download GraalVM JDK build
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4.2.1
         with:
           name: graalvm
           path: .