Skip to content

chore: Update GitHub Artifact Actions (major)#287

Merged
mem merged 1 commit intomainfrom
grafanarenovatebot/major-github-artifact-actions
Mar 4, 2026
Merged

chore: Update GitHub Artifact Actions (major)#287
mem merged 1 commit intomainfrom
grafanarenovatebot/major-github-artifact-actions

Conversation

@grafanarenovatebot
Copy link
Contributor

This PR contains the following updates:

Package Type Update Change
actions/download-artifact action major v7.0.0v8.0.0
actions/upload-artifact action major v6.0.0v7.0.0

Warning

Some dependencies could not be looked up. Check the warning logs for more information.


Release Notes

actions/download-artifact (actions/download-artifact)

v8.0.0

Compare Source

v8 - What's new

Direct downloads

To support direct uploads in actions/upload-artifact, the action will no longer attempt to unzip all downloaded files. Instead, the action checks the Content-Type header ahead of unzipping and skips non-zipped files. Callers wishing to download a zipped file as-is can also set the new skip-decompress parameter to false.

Enforced checks (breaking)

A previous release introduced digest checks on the download. If a download hash didn't match the expected hash from the server, the action would log a warning. Callers can now configure the behavior on mismatch with the digest-mismatch parameter. To be secure by default, we are now defaulting the behavior to error which will fail the workflow run.

ESM

To support new versions of the @​actions/* packages, we've upgraded the package to ESM.

What's Changed

Full Changelog: actions/download-artifact@v7...v8.0.0

actions/upload-artifact (actions/upload-artifact)

v7.0.0

Compare Source

v7 What's new

Direct Uploads

Adds support for uploading single files directly (unzipped). Callers can set the new archive parameter to false to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The name parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.

ESM

To support new versions of the @actions/* packages, we've upgraded the package to ESM.

What's Changed

New Contributors

Full Changelog: actions/upload-artifact@v6...v7.0.0


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@grafanarenovatebot grafanarenovatebot bot requested a review from a team as a code owner February 26, 2026 20:20
@grafanarenovatebot grafanarenovatebot bot requested review from mem and nadiamoe February 26, 2026 20:20
@grafanarenovatebot grafanarenovatebot bot force-pushed the grafanarenovatebot/major-github-artifact-actions branch from 978906f to ba55d0c Compare March 2, 2026 16:23
@mem mem enabled auto-merge (squash) March 4, 2026 20:04
@mem mem merged commit b0c1322 into main Mar 4, 2026
11 checks passed
@mem mem deleted the grafanarenovatebot/major-github-artifact-actions branch March 4, 2026 20:04
@sm-release-app sm-release-app bot mentioned this pull request Mar 4, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant