Skip to content

chore(deps): update github artifact actions (major)#2015

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/major-github-artifact-actions
Open

chore(deps): update github artifact actions (major)#2015
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/major-github-artifact-actions

Conversation

@renovate

@renovate renovate Bot commented Jul 19, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change
actions/download-artifact action major v4 → v8
actions/upload-artifact action major v4 → v7

Release Notes

actions/download-artifact (actions/download-artifact)

v8.0.1

Compare Source

What's Changed

Full Changelog: actions/download-artifact@v8...v8.0.1

v8.0.0

Compare Source

v8 - What's new

[!IMPORTANT]
actions/download-artifact@​v8 has been migrated to an ESM module. This should be transparent to the caller but forks might need to make significant changes.

[!IMPORTANT]
Hash mismatches will now error by default. Users can override this behavior with a setting change (see below).

Direct downloads

To support direct uploads in actions/upload-artifact, the action will no longer attempt to unzip all downloaded files. Instead, the action checks the Content-Type header ahead of unzipping and skips non-zipped files. Callers wishing to download a zipped file as-is can also set the new skip-decompress parameter to true.

Enforced checks (breaking)

A previous release introduced digest checks on the download. If a download hash didn't match the expected hash from the server, the action would log a warning. Callers can now configure the behavior on mismatch with the digest-mismatch parameter. To be secure by default, we are now defaulting the behavior to error which will fail the workflow run.

ESM

To support new versions of the @​actions/* packages, we've upgraded the package to ESM.

What's Changed

Full Changelog: actions/download-artifact@v7...v8.0.0

v8

Compare Source

v7.0.0

Compare Source

v7 - What's new

[!IMPORTANT]
actions/download-artifact@​v7 now runs on Node.js 24 (runs.using: node24) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.

Node.js 24

This release updates the runtime to Node.js 24. v6 had preliminary support for Node 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.

What's Changed

New Contributors

Full Changelog: actions/download-artifact@v6.0.0...v7.0.0

v7

Compare Source

v6.0.0

Compare Source

What's Changed

BREAKING CHANGE: this update supports Node v24.x. This is not a breaking change per-se but we're treating it as such.

New Contributors

Full Changelog: actions/download-artifact@v5...v6.0.0

v6

Compare Source

v5.0.0

Compare Source

What's Changed

v5.0.0

🚨 Breaking Change

This release fixes an inconsistency in path behavior for single artifact downloads by ID. If you're downloading single artifacts by ID, the output path may change.

What Changed

Previously, single artifact downloads behaved differently depending on how you specified the artifact:

  • By name: name: my-artifact → extracted to path/ (direct)
  • By ID: artifact-ids: 12345 → extracted to path/my-artifact/ (nested)

Now both methods are consistent:

  • By name: name: my-artifact → extracted to path/ (unchanged)
  • By ID: artifact-ids: 12345 → extracted to path/ (fixed - now direct)
Migration Guide
✅ No Action Needed If:
  • You download artifacts by name
  • You download multiple artifacts by ID
  • You already use merge-multiple: true as a workaround
⚠️ Action Required If:

You download single artifacts by ID and your workflows expect the nested directory structure.

Before v5 (nested structure):

- uses: actions/download-artifact@v4
  with:
    artifact-ids: 12345
    path: dist

# Files were in: dist/my-artifact/

Where my-artifact is the name of the artifact you previously uploaded

To maintain old behavior (if needed):

- uses: actions/download-artifact@v5
  with:
    artifact-ids: 12345
    path: dist/my-artifact  # Explicitly specify the nested path

New Contributors

Full Changelog: actions/download-artifact@v4...v5.0.0

v5

Compare Source

v4.3.0

Compare Source

What's Changed

New Contributors

Full Changelog: actions/download-artifact@v4.2.1...v4.3.0

v4.2.1

Compare Source

What's Changed

Full Changelog: actions/download-artifact@v4.2.0...v4.2.1

v4.2.0

Compare Source

What's Changed

New Contributors

Full Changelog: actions/download-artifact@v4.1.9...v4.2.0

v4.1.9

Compare Source

What's Changed

New Contributors

Full Changelog: actions/download-artifact@v4.1.8...v4.1.9

v4.1.8

Compare Source

What's Changed

Full Changelog: actions/download-artifact@v4.1.7...v4.1.8

v4.1.7

Compare Source

What's Changed

Full Changelog: actions/download-artifact@v4.1.6...v4.1.7

v4.1.6

Compare Source

What's Changed

Full Changelog: actions/download-artifact@v4.1.5...v4.1.6

v4.1.5

Compare Source

What's Changed

  • Update readme with v3/v2/v1 deprecation notice by @​robherley in #​322
  • Update dependencies @actions/core to v1.10.1 and @actions/artifact to v2.1.5

Full Changelog: actions/download-artifact@v4.1.4...v4.1.5

v4.1.4

Compare Source

What's Changed

Full Changelog: actions/download-artifact@v4...v4.1.4

v4.1.3

Compare Source

What's Changed

New Contributors

Full Changelog: actions/download-artifact@v4...v4.1.3

v4.1.2

Compare Source

v4.1.1

Compare Source

  • Fix transient request timeouts #​249
  • Bump @actions/artifacts to latest version

v4.1.0

Compare Source

What's Changed

New Contributors

Full Changelog: actions/download-artifact@v4...v4.1.0

actions/upload-artifact (actions/upload-artifact)

v7.0.1

Compare Source

What's Changed

Full Changelog: actions/upload-artifact@v7...v7.0.1

v7.0.0

Compare Source

v7 What's new

Direct Uploads

Adds support for uploading single files directly (unzipped). Callers can set the new archive parameter to false to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The name parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.

ESM

To support new versions of the @actions/* packages, we've upgraded the package to ESM.

What's Changed

New Contributors

Full Changelog: actions/upload-artifact@v6...v7.0.0

v7

Compare Source

v6.0.0

Compare Source

v6 - What's new

[!IMPORTANT]
actions/upload-artifact@​v6 now runs on Node.js 24 (runs.using: node24) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.

Node.js 24

This release updates the runtime to Node.js 24. v5 had preliminary support for Node.js 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.

What's Changed

Full Changelog: actions/upload-artifact@v5.0.0...v6.0.0

v6

Compare Source

v5.0.0

Compare Source

What's Changed

BREAKING CHANGE: this update supports Node v24.x. This is not a breaking change per-se but we're treating it as such.

New Contributors

Full Changelog: actions/upload-artifact@v4...v5.0.0

v5

Compare Source

v4.6.2

Compare Source

What's Changed

  • Update to use artifact 2.3.2 package & prepare for new upload-artifact release by @​salmanmkc in #​685

New Contributors

Full Changelog: actions/upload-artifact@v4...v4.6.2

v4.6.1

Compare Source

What's Changed

Full Changelog: actions/upload-artifact@v4...v4.6.1

v4.6.0

Compare Source

What's Changed

Full Changelog: actions/upload-artifact@v4...v4.6.0

v4.5.0

Compare Source

What's Changed

New Contributors

Full Changelog: actions/upload-artifact@v4.4.3...v4.5.0

v4.4.3

Compare Source

What's Changed

Full Changelog: actions/upload-artifact@v4.4.2...v4.4.3

v4.4.2

Compare Source

What's Changed

  • Bump @actions/artifact to 2.1.11 by @​robherley in #​627
    • Includes fix for relative symlinks not resolving properly

Full Changelog: actions/upload-artifact@v4.4.1...v4.4.2

v4.4.1

Compare Source

What's Changed

New Contributors

Full Changelog: actions/upload-artifact@v4.4.0...v4.4.1

v4.4.0

Compare Source

Notice: Breaking Changes ⚠️

We will no longer include hidden files and folders by default in the upload-artifact action of this version. This reduces the risk that credentials are accidentally uploaded into artifacts. Customers who need to continue to upload these files can use a new option, include-hidden-files, to continue to do so.

See "Notice of upcoming deprecations and breaking changes in GitHub Actions runners" changelog and this issue for more details.

What's Changed

Full Changelog: actions/upload-artifact@v4.3.6...v4.4.0

v4.3.6

Compare Source

What's Changed

Full Changelog: actions/upload-artifact@v4...v4.3.6

v4.3.5

Compare Source

What's Changed

Full Changelog: actions/upload-artifact@v4.3.4...v4.3.5

v4.3.4

Compare Source

What's Changed

Full Changelog: actions/upload-artifact@v4.3.3...v4.3.4

v4.3.3

Compare Source

What's Changed

Full Changelog: actions/upload-artifact@v4.3.2...v4.3.3

v4.3.2

Compare Source

What's Changed

New Contributors

Full Changelog: actions/upload-artifact@v4.3.1...v4.3.2

v4.3.1

Compare Source

v4.3.0

Compare Source

What's Changed

Full Changelog: actions/upload-artifact@v4...v4.3.0

v4.2.0

Compare Source

What's Changed

Full Changelog: actions/upload-artifact@v4...v4.2.0

v4.1.0

Compare Source

What's Changed

New Contributors

Full Changelog: actions/upload-artifact@v4...v4.1.0

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@pkg-pr-new

pkg-pr-new Bot commented Jul 19, 2026 •
edited
Loading

Copy link
Copy Markdown

Open in StackBlitz

@stacksjs/actions

npm i https://pkg.pr.new/stacksjs/stacks/@stacksjs/actions@2015

@stacksjs/ai

npm i https://pkg.pr.new/stacksjs/stacks/@stacksjs/ai@2015

@stacksjs/alias

npm i https://pkg.pr.new/stacksjs/stacks/@stacksjs/alias@2015

@stacksjs/analytics

npm i https://pkg.pr.new/stacksjs/stacks/@stacksjs/analytics@2015

@stacksjs/api

npm i https://pkg.pr.new/stacksjs/stacks/@stacksjs/api@2015

@stacksjs/arrays

npm i https://pkg.pr.new/stacksjs/stacks/@stacksjs/arrays@2015

@stacksjs/auth

npm i https://pkg.pr.new/stacksjs/stacks/@stacksjs/auth@2015

@stacksjs/browser

npm i https://pkg.pr.new/stacksjs/stacks/@stacksjs/browser@2015

@stacksjs/browser-extension

npm i https://pkg.pr.new/stacksjs/stacks/@stacksjs/browser-extension@2015

@stacksjs/buddy

npm i https://pkg.pr.new/stacksjs/stacks/@stacksjs/buddy@2015

@stacksjs/build

npm i https://pkg.pr.new/stacksjs/stacks/@stacksjs/build@2015

@stacksjs/cache

npm i https://pkg.pr.new/stacksjs/stacks/@stacksjs/cache@2015

@stacksjs/calendar-api

npm i https://pkg.pr.new/stacksjs/stacks/@stacksjs/calendar-api@2015

@stacksjs/charts

npm i https://pkg.pr.new/stacksjs/stacks/@stacksjs/charts@2015

@stacksjs/chat

npm i https://pkg.pr.new/stacksjs/stacks/@stacksjs/chat@2015

@stacksjs/cli

npm i https://pkg.pr.new/stacksjs/stacks/@stacksjs/cli@2015

@stacksjs/cloud

npm i https://pkg.pr.new/stacksjs/stacks/@stacksjs/cloud@2015

@stacksjs/cms

npm i https://pkg.pr.new/stacksjs/stacks/@stacksjs/cms@2015

@stacksjs/collections

npm i https://pkg.pr.new/stacksjs/stacks/@stacksjs/collections@2015

@stacksjs/commerce

npm i https://pkg.pr.new/stacksjs/stacks/@stacksjs/commerce@2015

@stacksjs/composables

npm i https://pkg.pr.new/stacksjs/stacks/@stacksjs/composables@2015

@stacksjs/config

npm i https://pkg.pr.new/stacksjs/stacks/@stacksjs/config@2015

@stacksjs/cron

npm i https://pkg.pr.new/stacksjs/stacks/@stacksjs/cron@2015

@stacksjs/database

npm i https://pkg.pr.new/stacksjs/stacks/@stacksjs/database@2015

@stacksjs/datetime

npm i https://pkg.pr.new/stacksjs/stacks/@stacksjs/datetime@2015

@stacksjs/defaults

npm i https://pkg.pr.new/stacksjs/stacks/@stacksjs/defaults@2015

@stacksjs/desktop

npm i https://pkg.pr.new/stacksjs/stacks/@stacksjs/desktop@2015

@stacksjs/dns

npm i https://pkg.pr.new/stacksjs/stacks/@stacksjs/dns@2015

@stacksjs/docs

npm i https://pkg.pr.new/stacksjs/stacks/@stacksjs/docs@2015

@stacksjs/email

npm i https://pkg.pr.new/stacksjs/stacks/@stacksjs/email@2015

@stacksjs/enums

npm i https://pkg.pr.new/stacksjs/stacks/@stacksjs/enums@2015

@stacksjs/env

npm i https://pkg.pr.new/stacksjs/stacks/@stacksjs/env@2015

@stacksjs/error-handling

npm i https://pkg.pr.new/stacksjs/stacks/@stacksjs/error-handling@2015

@stacksjs/events

npm i https://pkg.pr.new/stacksjs/stacks/@stacksjs/events@2015

@stacksjs/faker

npm i https://pkg.pr.new/stacksjs/stacks/@stacksjs/faker@2015

@stacksjs/feature-flags

npm i https://pkg.pr.new/stacksjs/stacks/@stacksjs/feature-flags@2015

@stacksjs/git

npm i https://pkg.pr.new/stacksjs/stacks/@stacksjs/git@2015

@stacksjs/github

npm i https://pkg.pr.new/stacksjs/stacks/@stacksjs/github@2015

@stacksjs/health

npm i https://pkg.pr.new/stacksjs/stacks/@stacksjs/health@2015

@stacksjs/http

npm i https://pkg.pr.new/stacksjs/stacks/@stacksjs/http@2015

@stacksjs/i18n

npm i https://pkg.pr.new/stacksjs/stacks/@stacksjs/i18n@2015

@stacksjs/lint

npm i https://pkg.pr.new/stacksjs/stacks/@stacksjs/lint@2015

@stacksjs/logging

npm i https://pkg.pr.new/stacksjs/stacks/@stacksjs/logging@2015

@stacksjs/newsletter

npm i https://pkg.pr.new/stacksjs/stacks/@stacksjs/newsletter@2015

@stacksjs/notifications

npm i https://pkg.pr.new/stacksjs/stacks/@stacksjs/notifications@2015

@stacksjs/objects

npm i https://pkg.pr.new/stacksjs/stacks/@stacksjs/objects@2015

@stacksjs/orm

npm i https://pkg.pr.new/stacksjs/stacks/@stacksjs/orm@2015

@stacksjs/path

npm i https://pkg.pr.new/stacksjs/stacks/@stacksjs/path@2015

@stacksjs/payments

npm i https://pkg.pr.new/stacksjs/stacks/@stacksjs/payments@2015

@stacksjs/push

npm i https://pkg.pr.new/stacksjs/stacks/@stacksjs/push@2015

@stacksjs/query-builder

npm i https://pkg.pr.new/stacksjs/stacks/@stacksjs/query-builder@2015

@stacksjs/queue

npm i https://pkg.pr.new/stacksjs/stacks/@stacksjs/queue@2015

@stacksjs/realtime

npm i https://pkg.pr.new/stacksjs/stacks/@stacksjs/realtime@2015

@stacksjs/registry

npm i https://pkg.pr.new/stacksjs/stacks/@stacksjs/registry@2015

@stacksjs/repl

npm i https://pkg.pr.new/stacksjs/stacks/@stacksjs/repl@2015

@stacksjs/router

npm i https://pkg.pr.new/stacksjs/stacks/@stacksjs/router@2015

@stacksjs/scheduler

npm i https://pkg.pr.new/stacksjs/stacks/@stacksjs/scheduler@2015

@stacksjs/search-engine

npm i https://pkg.pr.new/stacksjs/stacks/@stacksjs/search-engine@2015

@stacksjs/security

npm i https://pkg.pr.new/stacksjs/stacks/@stacksjs/security@2015

@stacksjs/server

npm i https://pkg.pr.new/stacksjs/stacks/@stacksjs/server@2015

@stacksjs/shell

npm i https://pkg.pr.new/stacksjs/stacks/@stacksjs/shell@2015

@stacksjs/skills

npm i https://pkg.pr.new/stacksjs/stacks/@stacksjs/skills@2015

@stacksjs/slug

npm i https://pkg.pr.new/stacksjs/stacks/@stacksjs/slug@2015

@stacksjs/sms

npm i https://pkg.pr.new/stacksjs/stacks/@stacksjs/sms@2015

@stacksjs/socials

npm i https://pkg.pr.new/stacksjs/stacks/@stacksjs/socials@2015

@stacksjs/storage

npm i https://pkg.pr.new/stacksjs/stacks/@stacksjs/storage@2015

@stacksjs/strings

npm i https://pkg.pr.new/stacksjs/stacks/@stacksjs/strings@2015

@stacksjs/testing

npm i https://pkg.pr.new/stacksjs/stacks/@stacksjs/testing@2015

@stacksjs/tinker

npm i https://pkg.pr.new/stacksjs/stacks/@stacksjs/tinker@2015

@stacksjs/tunnel

npm i https://pkg.pr.new/stacksjs/stacks/@stacksjs/tunnel@2015

@stacksjs/types

npm i https://pkg.pr.new/stacksjs/stacks/@stacksjs/types@2015

@stacksjs/ui

npm i https://pkg.pr.new/stacksjs/stacks/@stacksjs/ui@2015

@stacksjs/utils

npm i https://pkg.pr.new/stacksjs/stacks/@stacksjs/utils@2015

@stacksjs/validation

npm i https://pkg.pr.new/stacksjs/stacks/@stacksjs/validation@2015

@stacksjs/whois

npm i https://pkg.pr.new/stacksjs/stacks/@stacksjs/whois@2015

commit: 09302e1

@renovate
renovate Bot force-pushed the renovate/major-github-artifact-actions branch 25 times, most recently from 85b1c14 to 9ddb703 Compare July 20, 2026 21:12
@renovate
renovate Bot force-pushed the renovate/major-github-artifact-actions branch 17 times, most recently from 2cce0ce to 223d432 Compare July 21, 2026 06:00
@renovate
renovate Bot force-pushed the renovate/major-github-artifact-actions branch from 223d432 to 4a1abf0 Compare July 21, 2026 07:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies major

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants