From 1763fe66012ba345e32c5a34c99a4bd9e6ce33eb Mon Sep 17 00:00:00 2001
From: Shaojun Liu <61072813+liu-shaojun@users.noreply.github.com>
Date: Wed, 4 Sep 2024 17:12:19 +0800
Subject: [PATCH] fix dependabot alerts (#12014)

---
 .github/actions/llm/download-llm-binary/action.yml | 2 +-
 .github/workflows/llm-harness-evaluation.yml       | 2 +-
 python/requirements/nano/requirements_torch.txt    | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/actions/llm/download-llm-binary/action.yml b/.github/actions/llm/download-llm-binary/action.yml
index ba9f8ddf6d4..ec31a0541c7 100644
--- a/.github/actions/llm/download-llm-binary/action.yml
+++ b/.github/actions/llm/download-llm-binary/action.yml
@@ -5,7 +5,7 @@ runs:
   using: "composite"
   steps:
     - name: Download all build files
-      uses: actions/download-artifact@v3
+      uses: actions/download-artifact@4.1.7
     - name: Move build resources
       shell: bash
       run: |
diff --git a/.github/workflows/llm-harness-evaluation.yml b/.github/workflows/llm-harness-evaluation.yml
index 96473621c43..882929ad30b 100644
--- a/.github/workflows/llm-harness-evaluation.yml
+++ b/.github/workflows/llm-harness-evaluation.yml
@@ -216,7 +216,7 @@ jobs:
           OUTPUT_PATH="results_$DATE"
           echo "OUTPUT_PATH=$OUTPUT_PATH" >> $GITHUB_ENV
       - name: Download all results
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@4.1.7
         with:
           name: harness_results
           path: ${{ env.OUTPUT_PATH }}        
diff --git a/python/requirements/nano/requirements_torch.txt b/python/requirements/nano/requirements_torch.txt
index efda7ee643e..2224fe6e020 100644
--- a/python/requirements/nano/requirements_torch.txt
+++ b/python/requirements/nano/requirements_torch.txt
@@ -11,4 +11,4 @@ torchmetrics==0.11.0
 opencv-python-headless
 PyTurboJPEG
 opencv-transforms
-cryptography==42.0.0
+cryptography