Skip to content

build(deps): bump actions/download-artifact from 7.0.0 to 8.0.1#924

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/github_actions/actions/download-artifact-8.0.1
Open

build(deps): bump actions/download-artifact from 7.0.0 to 8.0.1#924
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/github_actions/actions/download-artifact-8.0.1

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Mar 12, 2026

Bumps actions/download-artifact from 7.0.0 to 8.0.1.

Release notes

Sourced from actions/download-artifact's releases.

v8.0.1

What's Changed

Full Changelog: actions/download-artifact@v8...v8.0.1

v8.0.0

v8 - What's new

[!IMPORTANT] actions/download-artifact@v8 has been migrated to an ESM module. This should be transparent to the caller but forks might need to make significant changes.

[!IMPORTANT] Hash mismatches will now error by default. Users can override this behavior with a setting change (see below).

Direct downloads

To support direct uploads in actions/upload-artifact, the action will no longer attempt to unzip all downloaded files. Instead, the action checks the Content-Type header ahead of unzipping and skips non-zipped files. Callers wishing to download a zipped file as-is can also set the new skip-decompress parameter to true.

Enforced checks (breaking)

A previous release introduced digest checks on the download. If a download hash didn't match the expected hash from the server, the action would log a warning. Callers can now configure the behavior on mismatch with the digest-mismatch parameter. To be secure by default, we are now defaulting the behavior to error which will fail the workflow run.

ESM

To support new versions of the @actions/* packages, we've upgraded the package to ESM.

What's Changed

Full Changelog: actions/download-artifact@v7...v8.0.0

Commits
  • 3e5f45b Add regression tests for CJK characters (#471)
  • e6d03f6 Add a regression test for artifact name + content-type mismatches (#472)
  • 70fc10c Merge pull request #461 from actions/danwkennedy/digest-mismatch-behavior
  • f258da9 Add change docs
  • ccc058e Fix linting issues
  • bd7976b Add a setting to specify what to do on hash mismatch and default it to error
  • ac21fcf Merge pull request #460 from actions/danwkennedy/download-no-unzip
  • 15999bf Add note about package bumps
  • 974686e Bump the version to v8 and add release notes
  • fbe48b1 Update test names to make it clearer what they do
  • Additional commits viewable in compare view

@dependabot dependabot bot added this to the 1.26.0 milestone Mar 12, 2026
@dependabot dependabot bot requested a review from ParanoidUser as a code owner March 12, 2026 11:42
@dependabot dependabot bot added the chore Maintenance changes label Mar 12, 2026
@github-actions
Copy link
Copy Markdown
Contributor

Job Summary for Gradle

Build CI :: scan
Gradle Root Project Requested Tasks Gradle Version Build Outcome Build Scan®
codewars-handbook sonar 9.4.0 Build Scan published

Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 7.0.0 to 8.0.1.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@37930b1...3e5f45b)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: 8.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/github_actions/actions/download-artifact-8.0.1 branch from accc051 to 65f128c Compare March 27, 2026 02:13
@sonarqubecloud
Copy link
Copy Markdown

@github-actions
Copy link
Copy Markdown
Contributor

Job Summary for Gradle

Build CI :: scan
Gradle Root Project Requested Tasks Gradle Version Build Outcome Build Scan®
codewars-handbook sonar 9.4.1 Build Scan published

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

chore Maintenance changes

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants