diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 1f68f01c8e..4b57afb4e3 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -418,7 +418,7 @@ jobs:
           Copy-Item -Path "${{ github.workspace }}" -Destination "${{ env.PIXI_WORKSPACE }}" -Recurse
           echo "${{ env.PIXI_WORKSPACE }}/${{ env.TARGET_RELEASE }}" | Out-File -Append -Encoding utf8 -FilePath $env:GITHUB_PATH
       - name: Download binary from build
-        uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4
+        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
         with:
           name: pixi-windows-x86_64-${{ github.sha }}
           path: ${{ env.PIXI_WORKSPACE }}/${{ env.TARGET_RELEASE }}
@@ -440,7 +440,7 @@ jobs:
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - name: Download binary from build
-        uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4
+        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
         with:
           name: pixi-macos-aarch64-${{ github.sha }}
           path: ${{ env.TARGET_RELEASE }}
@@ -464,7 +464,7 @@ jobs:
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - name: Download binary from build
-        uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4
+        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
         with:
           name: pixi-linux-x86_64-${{ github.sha }}
           path: ${{ env.TARGET_RELEASE }}
@@ -495,7 +495,7 @@ jobs:
           Copy-Item -Path "${{ github.workspace }}" -Destination "${{ env.PIXI_WORKSPACE }}" -Recurse
           echo "${{ env.PIXI_WORKSPACE }}/${{ env.TARGET_RELEASE }}" | Out-File -Append -Encoding utf8 -FilePath $env:GITHUB_PATH
       - name: Download binary from build
-        uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4
+        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
         with:
           name: pixi-windows-x86_64-${{ github.sha }}
           path: ${{ env.PIXI_WORKSPACE }}/${{ env.TARGET_RELEASE }}
@@ -524,7 +524,7 @@ jobs:
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - name: Download binary from build
-        uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4
+        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
         with:
           name: pixi-macos-aarch64-${{ github.sha }}
           path: ${{ env.TARGET_RELEASE }}
@@ -558,7 +558,7 @@ jobs:
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - name: Download binary from build
-        uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4
+        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
         with:
           name: pixi-linux-x86_64-${{ github.sha }}
           path: ${{ env.TARGET_RELEASE }}
@@ -599,7 +599,7 @@ jobs:
           Copy-Item -Path "${{ github.workspace }}" -Destination "${{ env.PIXI_WORKSPACE }}" -Recurse
           echo "${{ env.PIXI_WORKSPACE }}/${{ env.TARGET_RELEASE }}" | Out-File -Append -Encoding utf8 -FilePath $env:GITHUB_PATH
       - name: Download binary from build
-        uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4
+        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
         with:
           name: pixi-windows-x86_64-${{ github.sha }}
           path: ${{ env.PIXI_WORKSPACE }}/${{ env.TARGET_RELEASE }}
@@ -650,7 +650,7 @@ jobs:
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - name: Download binary from build
-        uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4
+        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
         with:
           name: pixi-macos-aarch64-${{ github.sha }}
           path: ${{ env.TARGET_RELEASE }}
@@ -698,7 +698,7 @@ jobs:
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - name: Download binary from build
-        uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4
+        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
         with:
           name: pixi-linux-x86_64-${{ github.sha }}
           path: ${{ env.TARGET_RELEASE }}
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index d58ac59c8d..1706ede187 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -148,7 +148,7 @@ jobs:
           branch: feature/allow_binaries_in_root_of_tar
       # Get the dist-manifest
       - name: Fetch local artifacts
-        uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4
+        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
         with:
           pattern: artifacts-*
           path: target/distrib/
@@ -204,14 +204,14 @@ jobs:
         with:
           submodules: recursive
       - name: Install cached dist
-        uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4
+        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
         with:
           name: cargo-dist-cache
           path: ~/.cargo/bin/
       - run: chmod +x ~/.cargo/bin/dist
       # Get all the local artifacts for the global tasks to use (for e.g. checksums)
       - name: Fetch local artifacts
-        uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4
+        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
         with:
           pattern: artifacts-*
           path: target/distrib/
@@ -253,14 +253,14 @@ jobs:
         with:
           submodules: recursive
       - name: Install cached dist
-        uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4
+        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
         with:
           name: cargo-dist-cache
           path: ~/.cargo/bin/
       - run: chmod +x ~/.cargo/bin/dist
       # Fetch artifacts from scratch-storage
       - name: Fetch artifacts
-        uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4
+        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
         with:
           pattern: artifacts-*
           path: target/distrib/
@@ -361,7 +361,7 @@ jobs:
           submodules: recursive
       # Create a GitHub Release while uploading all files to it
       - name: "Download GitHub Artifacts"
-        uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4
+        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
         with:
           pattern: artifacts-*
           path: artifacts
diff --git a/.github/workflows/test_common_wheels.yml b/.github/workflows/test_common_wheels.yml
index be29437432..f1a3315d95 100644
--- a/.github/workflows/test_common_wheels.yml
+++ b/.github/workflows/test_common_wheels.yml
@@ -39,7 +39,7 @@ jobs:
         run: |
           Copy-Item -Path "${{ github.workspace }}" -Destination "${{ env.PIXI_WORKSPACE }}" -Recurse
       - name: Download binary from build
-        uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4
+        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
         with:
           name: pixi-${{ inputs.arch }}-${{ inputs.sha }}
           path: ${{ env.TARGET_RELEASE }}
diff --git a/.github/workflows/trampoline.yaml b/.github/workflows/trampoline.yaml
index 2f67e30e07..af289b4256 100644
--- a/.github/workflows/trampoline.yaml
+++ b/.github/workflows/trampoline.yaml
@@ -89,7 +89,7 @@ jobs:
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
       - name: Download all binaries
-        uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4
+        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
         with:
           path: trampoline/binaries/
           merge-multiple: true
diff --git a/trampoline/binaries/pixi-trampoline-aarch64-apple-darwin.zst b/trampoline/binaries/pixi-trampoline-aarch64-apple-darwin.zst
index 9abaad4ce8..f548f9142b 100644
Binary files a/trampoline/binaries/pixi-trampoline-aarch64-apple-darwin.zst and b/trampoline/binaries/pixi-trampoline-aarch64-apple-darwin.zst differ
diff --git a/trampoline/binaries/pixi-trampoline-aarch64-pc-windows-msvc.exe.zst b/trampoline/binaries/pixi-trampoline-aarch64-pc-windows-msvc.exe.zst
index 47054e932b..8a80a3c0e5 100644
Binary files a/trampoline/binaries/pixi-trampoline-aarch64-pc-windows-msvc.exe.zst and b/trampoline/binaries/pixi-trampoline-aarch64-pc-windows-msvc.exe.zst differ
diff --git a/trampoline/binaries/pixi-trampoline-aarch64-unknown-linux-musl.zst b/trampoline/binaries/pixi-trampoline-aarch64-unknown-linux-musl.zst
index 44e24e0896..ba3efec275 100644
Binary files a/trampoline/binaries/pixi-trampoline-aarch64-unknown-linux-musl.zst and b/trampoline/binaries/pixi-trampoline-aarch64-unknown-linux-musl.zst differ
diff --git a/trampoline/binaries/pixi-trampoline-powerpc64le-unknown-linux-gnu.zst b/trampoline/binaries/pixi-trampoline-powerpc64le-unknown-linux-gnu.zst
index cb5433e889..9572915049 100644
Binary files a/trampoline/binaries/pixi-trampoline-powerpc64le-unknown-linux-gnu.zst and b/trampoline/binaries/pixi-trampoline-powerpc64le-unknown-linux-gnu.zst differ
diff --git a/trampoline/binaries/pixi-trampoline-riscv64gc-unknown-linux-gnu.zst b/trampoline/binaries/pixi-trampoline-riscv64gc-unknown-linux-gnu.zst
index 3f573cde52..5aee8f6715 100644
Binary files a/trampoline/binaries/pixi-trampoline-riscv64gc-unknown-linux-gnu.zst and b/trampoline/binaries/pixi-trampoline-riscv64gc-unknown-linux-gnu.zst differ
diff --git a/trampoline/binaries/pixi-trampoline-x86_64-apple-darwin.zst b/trampoline/binaries/pixi-trampoline-x86_64-apple-darwin.zst
index 587831b446..d6b256ddcd 100644
Binary files a/trampoline/binaries/pixi-trampoline-x86_64-apple-darwin.zst and b/trampoline/binaries/pixi-trampoline-x86_64-apple-darwin.zst differ
diff --git a/trampoline/binaries/pixi-trampoline-x86_64-pc-windows-msvc.exe.zst b/trampoline/binaries/pixi-trampoline-x86_64-pc-windows-msvc.exe.zst
index 841951e0f0..91911b8044 100644
Binary files a/trampoline/binaries/pixi-trampoline-x86_64-pc-windows-msvc.exe.zst and b/trampoline/binaries/pixi-trampoline-x86_64-pc-windows-msvc.exe.zst differ
diff --git a/trampoline/binaries/pixi-trampoline-x86_64-unknown-linux-musl.zst b/trampoline/binaries/pixi-trampoline-x86_64-unknown-linux-musl.zst
index d35c92f5d4..d3b815f212 100644
Binary files a/trampoline/binaries/pixi-trampoline-x86_64-unknown-linux-musl.zst and b/trampoline/binaries/pixi-trampoline-x86_64-unknown-linux-musl.zst differ