Merge pull request #164 from metabrainz/CVE-2024-42471

Hopefully fix CVE-2024-42471

Author: mayhem

.github/workflows/ci.yml

@@ -47,7 +47,7 @@ jobs:
     runs-on: ubuntu-latest
     needs: test
     steps:
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v4.1.8
       - name: Publish Test Reports
         uses: EnricoMi/publish-unit-test-result-action/composite@v2
         if: always()