diff --git a/.github/workflows/build-docker.yml b/.github/workflows/build-docker.yml
index 3c1cadd..96d5572 100644
--- a/.github/workflows/build-docker.yml
+++ b/.github/workflows/build-docker.yml
@@ -123,7 +123,7 @@ jobs:
       packages: write
     steps:
       - name: Download digests
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
         with:
           path: /tmp/digests
           pattern: digests-*
@@ -301,7 +301,7 @@ jobs:
       packages: write
     steps:
       - name: Download digests
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
         with:
           path: /tmp/digests
           pattern: digests-*
diff --git a/.github/workflows/publish-mirror.yml b/.github/workflows/publish-mirror.yml
index 5e7330e..9f37835 100644
--- a/.github/workflows/publish-mirror.yml
+++ b/.github/workflows/publish-mirror.yml
@@ -21,7 +21,7 @@ jobs:
       VERSION: ${{ fromJson(inputs.plan).announcement_tag }}
     steps:
       - name: "Download GitHub Artifacts"
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3
         with:
           pattern: artifacts-*
           path: artifacts
diff --git a/.github/workflows/publish-pypi.yml b/.github/workflows/publish-pypi.yml
index e1609c9..b51c4fe 100644
--- a/.github/workflows/publish-pypi.yml
+++ b/.github/workflows/publish-pypi.yml
@@ -23,7 +23,7 @@ jobs:
     steps:
       - name: "Install uv"
         uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
-      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+      - uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
         with:
           pattern: wheels-*
           path: wheels
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index e34750f..87df756 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -130,14 +130,14 @@ jobs:
           persist-credentials: false
           submodules: recursive
       - name: Install cached dist
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
+        uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3
         with:
           name: cargo-dist-cache
           path: ~/.cargo/bin/
       - run: chmod +x ~/.cargo/bin/dist
       # Get all the local artifacts for the global tasks to use (for e.g. checksums)
       - name: Fetch local artifacts
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
+        uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3
         with:
           pattern: artifacts-*
           path: target/distrib/
@@ -181,14 +181,14 @@ jobs:
           persist-credentials: false
           submodules: recursive
       - name: Install cached dist
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
+        uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3
         with:
           name: cargo-dist-cache
           path: ~/.cargo/bin/
       - run: chmod +x ~/.cargo/bin/dist
       # Fetch artifacts from scratch-storage
       - name: Fetch artifacts
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
+        uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3
         with:
           pattern: artifacts-*
           path: target/distrib/
@@ -246,7 +246,7 @@ jobs:
           submodules: recursive
       # Create a GitHub Release while uploading all files to it
       - name: "Download GitHub Artifacts"
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
+        uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3
         with:
           pattern: artifacts-*
           path: artifacts
diff --git a/dist-workspace.toml b/dist-workspace.toml
index e65288f..f316027 100644
--- a/dist-workspace.toml
+++ b/dist-workspace.toml
@@ -81,5 +81,5 @@ global = "depot-ubuntu-latest-4"
 [dist.github-action-commits]
 "actions/checkout" = "0c366fd6a839edf440554fa01a7085ccba70ac98"                # v6.0.2
 "actions/upload-artifact" = "bbbca2ddaa5d8feaa63e36b76fdaad77386f024f"         # v7.0.0
-"actions/download-artifact" = "3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c"       # v8.0.1
+"actions/download-artifact" = "70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3"       # v8.0.0
 "actions/attest-build-provenance" = "00014ed6ed5efc5b1ab7f7f34a39eb55d41aa4f8" # v3.1.0
diff --git a/ruff b/ruff
index 4e9de95..beb543b 160000
--- a/ruff
+++ b/ruff
@@ -1 +1 @@
-Subproject commit 4e9de95cd83e6ffd4b1af7f4fd36af959c4cac07
+Subproject commit beb543b5c666be9fd3f13c88df818f202b63e9d0