Merge pull request #4254 from google:dependabot/github_actions/actions/download-artifact-5.0.0

PiperOrigin-RevId: 794609630

Author: copybara-github

.github/workflows/ci.yaml

@@ -137,7 +137,7 @@ jobs:
         # ./compiler/bazel-bin.
       - name: Grab Unshaded Compiler
         # https://github.com/marketplace/actions/download-a-build-artifact
-        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
+        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
         with:
           name: unshaded_compiler
           # Put the binary where bazel would have put it.
@@ -178,7 +178,7 @@ jobs:
 
         # Grab the SNAPSHOT bundles shared from `build-and-test` and put the file into ./bazel-bin.
       - name: Grab Snapshot Bundles
-        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
+        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
         with:
           name: snapshot_bundles
           # Make it seem like files were generated by bazel