Merge pull request #200 from bio-phys/fix-download-vulnerability

Fix vulnerability in download action.

.github/workflows/tests.yml

@@ -22,13 +22,12 @@ jobs:
 
     steps:
       - uses: actions/checkout@v3
-      - name: Install poetry
-        run: pip install poetry
       - name: Set up Python ${{ matrix.python-version }}
         uses: actions/setup-python@v4
         with:
           python-version: ${{ matrix.python-version }}
-          cache: 'poetry'
+      - name: Install poetry
+        run: pip install poetry
       - name: Install mdbenchmark
         run: poetry install --extras docs
       - name: Check reformat
@@ -43,6 +42,8 @@ jobs:
         run: poetry run pytest -v --cov=mdbenchmark --cov-report=xml
       - name: Upload coverage
         uses: codecov/codecov-action@v3
+        env:
+          CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
         with:
           env_vars: PYTHON
           fail_ci_if_error: true
@@ -77,7 +78,7 @@ jobs:
       - name: Update pip
         run: pip install --upgrade pip
       - name: Download build artifacts
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v4
         with:
           name: dists.${{ matrix.python-version }}
           path: dist