chore(deps): update github actions (major)

[miracum-renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/download-artifact	action	major	v7.0.0 → v8.0.0
actions/upload-artifact	action	major	v6.0.0 → v7.0.0

---

Release Notes

actions/download-artifact (actions/download-artifact)

v8.0.0

Compare Source

v8 - What's new

Direct downloads

To support direct uploads in actions/upload-artifact, the action will no longer attempt to unzip all downloaded files. Instead, the action checks the Content-Type header ahead of unzipping and skips non-zipped files. Callers wishing to download a zipped file as-is can also set the new skip-decompress parameter to false.

Enforced checks (breaking)

A previous release introduced digest checks on the download. If a download hash didn't match the expected hash from the server, the action would log a warning. Callers can now configure the behavior on mismatch with the digest-mismatch parameter. To be secure by default, we are now defaulting the behavior to error which will fail the workflow run.

ESM

To support new versions of the @​actions/* packages, we've upgraded the package to ESM.

What's Changed

• Don't attempt to un-zip non-zipped downloads by @​danwkennedy in #​460
• Add a setting to specify what to do on hash mismatch and default it to error by @​danwkennedy in #​461

Full Changelog: actions/download-artifact@v7...v8.0.0

actions/upload-artifact (actions/upload-artifact)

v7.0.0

Compare Source

v7 What's new

Direct Uploads

Adds support for uploading single files directly (unzipped). Callers can set the new archive parameter to false to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The name parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.

ESM

To support new versions of the @actions/* packages, we've upgraded the package to ESM.

What's Changed

• Add proxy integration test by @​Link- in #​754
• Upgrade the module to ESM and bump dependencies by @​danwkennedy in #​762
• Support direct file uploads by @​danwkennedy in #​764

New Contributors

• @​Link- made their first contribution in #​754

Full Changelog: actions/upload-artifact@v6...v7.0.0

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, on day 1 of the month ( * 0-3 1 * * ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[github-actions]

✅⚠️MegaLinter analysis: Success with warnings

Descriptor	Linter	Files	Fixed	Errors	Warnings	Elapsed time
✅ ACTION	actionlint	4		0	0	0.16s
✅ BASH	bash-exec	5		0	0	0.03s
✅ BASH	shellcheck	5		0	0	0.2s
✅ BASH	shfmt	5		0	0	0.01s
✅ EDITORCONFIG	editorconfig-checker	265		0	0	0.31s
✅ JSON	jsonlint	2		0	0	0.33s
✅ JSON	prettier	2		0	0	0.61s
✅ MARKDOWN	markdownlint	15		0	0	1.74s
✅ REPOSITORY	checkov	yes		no	no	31.72s
✅ REPOSITORY	dustilock	yes		no	no	0.03s
✅ REPOSITORY	gitleaks	yes		no	no	1.11s
✅ REPOSITORY	git_diff	yes		no	no	0.02s
✅ REPOSITORY	grype	yes		no	no	43.65s
✅ REPOSITORY	secretlint	yes		no	no	3.15s
✅ REPOSITORY	syft	yes		no	no	2.08s
✅ REPOSITORY	trivy	yes		no	no	11.66s
✅ REPOSITORY	trivy-sbom	yes		no	no	0.25s
✅ REPOSITORY	trufflehog	yes		no	no	4.88s
⚠️ YAML	prettier	177		1	10	1.71s
✅ YAML	yamllint	177		0	0	1.54s

Detailed Issues

⚠️ YAML / prettier - 1 error

Checking formatting...
[warn] charts/blaze/values.yaml
[warn] charts/fhir-gateway/values.yaml
[warn] charts/fhir-pseudonymizer/values.yaml
[warn] charts/hive-metastore/values.yaml
[warn] charts/opal/values.yaml
[warn] charts/recruit/Chart.yaml
[warn] charts/recruit/values.yaml
[warn] charts/stream-processors/values.yaml
[warn] charts/vfps/values.yaml
[warn] Code style issues found in 9 files. Run Prettier with --write to fix.

See detailed reports in MegaLinter artifacts

You could have the same capabilities but better runtime performances if you use a MegaLinter flavor:

• oxsecurity/megalinter/flavors/documentation@v9.2.0 (49 linters)
• oxsecurity/megalinter/flavors/ruby@v9.2.0 (50 linters)
• oxsecurity/megalinter/flavors/rust@v9.2.0 (50 linters)

Your project could benefit from a custom flavor, which would allow you to run only the linters you need, and thus improve runtime performances. (Skip this info by defining FLAVOR_SUGGESTIONS: false)

• Documentation: Custom Flavors
• Command: npx mega-linter-runner@9.2.0 --custom-flavor-setup --custom-flavor-linters ACTION_ACTIONLINT,BASH_EXEC,BASH_SHELLCHECK,BASH_SHFMT,EDITORCONFIG_EDITORCONFIG_CHECKER,JSON_JSONLINT,JSON_PRETTIER,MARKDOWN_MARKDOWNLINT,REPOSITORY_CHECKOV,REPOSITORY_DUSTILOCK,REPOSITORY_GIT_DIFF,REPOSITORY_GITLEAKS,REPOSITORY_GRYPE,REPOSITORY_SECRETLINT,REPOSITORY_SYFT,REPOSITORY_TRIVY,REPOSITORY_TRIVY_SBOM,REPOSITORY_TRUFFLEHOG,YAML_PRETTIER,YAML_YAMLLINT