Merge pull request #47 from github/dependabot/github_actions/actions/download-artifact-5.0.0

Bump actions/download-artifact from 4.1.9 to 5.0.0

Author: bdehamer

.github/workflows/attest.yml

@@ -17,7 +17,7 @@ jobs:
       id-token: write
       attestations: write
     steps:
-      - uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # v4.1.9
+      - uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
         with:
           name: ${{ inputs.artifact }}
       - uses: actions/attest-build-provenance@e8998f949152b193b063cb0ec769d69d929409be # v2.4.0