Skip to content

chore(deps): update actions/download-artifact action to v8#322

Merged
edgarrmondragon merged 1 commit intomainfrom
renovate/major-github-artifact-actions
Mar 7, 2026
Merged

chore(deps): update actions/download-artifact action to v8#322
edgarrmondragon merged 1 commit intomainfrom
renovate/major-github-artifact-actions

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Mar 7, 2026

This PR contains the following updates:

Package Type Update Change
actions/download-artifact action major v7.0.0v8.0.0

Release Notes

actions/download-artifact (actions/download-artifact)

v8.0.0

Compare Source

v8 - What's new
Direct downloads

To support direct uploads in actions/upload-artifact, the action will no longer attempt to unzip all downloaded files. Instead, the action checks the Content-Type header ahead of unzipping and skips non-zipped files. Callers wishing to download a zipped file as-is can also set the new skip-decompress parameter to false.

Enforced checks (breaking)

A previous release introduced digest checks on the download. If a download hash didn't match the expected hash from the server, the action would log a warning. Callers can now configure the behavior on mismatch with the digest-mismatch parameter. To be secure by default, we are now defaulting the behavior to error which will fail the workflow run.

ESM

To support new versions of the @​actions/* packages, we've upgraded the package to ESM.

What's Changed

Full Changelog: actions/download-artifact@v7...v8.0.0


Configuration

📅 Schedule: Branch creation - Between day 1 and 7 of the month, and on Sunday and Saturday ( * * 1-7 * 0,6 ) in timezone America/Mexico_City, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot requested a review from edgarrmondragon as a code owner March 7, 2026 17:19
@renovate renovate bot added the dependencies Pull requests that update a dependency file label Mar 7, 2026
@edgarrmondragon edgarrmondragon added this pull request to the merge queue Mar 7, 2026
Merged via the queue into main with commit f962d81 Mar 7, 2026
8 checks passed
@edgarrmondragon edgarrmondragon deleted the renovate/major-github-artifact-actions branch March 7, 2026 17:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant