GitHub Action SHA errors

Fix an action reference that GitHub cannot resolve.

An error such as “unable to resolve action” occurs before repository code runs. The referenced commit does not exist in the action repository, or the action path is incorrect.

Verify the commit

Open the upstream action repository and resolve the intended maintained tag to its full 40-character commit SHA. Confirm that the commit exists before editing the workflow.

Use the SHA with a version comment:

yaml

- uses: actions/download-artifact@FULL_40_CHARACTER_SHA # v4

Do not shorten the SHA. Do not copy a digest from an unrelated action or from a different repository.

Repair the fleet safely

Search every repository for the invalid SHA. Open focused corrections. Rerun the complete release certification because the failure prevented the original workflow from proving the artifact path.

Dependabot can maintain pinned action references. Review its change as a supply-chain update, not as formatting.