Skip to content

Conversation

@descope
Copy link
Contributor

@descope descope bot commented Jan 2, 2026

This PR contains the following updates:

Package Type Update Change OpenSSF
actions/download-artifact action major v4.3.0v7.0.0 OpenSSF Scorecard

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

actions/download-artifact (actions/download-artifact)

v7.0.0

Compare Source

v7 - What's new

[!IMPORTANT]
actions/download-artifact@​v7 now runs on Node.js 24 (runs.using: node24) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.

Node.js 24

This release updates the runtime to Node.js 24. v6 had preliminary support for Node 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.

What's Changed

New Contributors

Full Changelog: actions/download-artifact@v6.0.0...v7.0.0

v6.0.0

Compare Source

What's Changed

BREAKING CHANGE: this update supports Node v24.x. This is not a breaking change per-se but we're treating it as such.

New Contributors

Full Changelog: actions/download-artifact@v5...v6.0.0

v5.0.0

Compare Source

What's Changed

v5.0.0

🚨 Breaking Change

This release fixes an inconsistency in path behavior for single artifact downloads by ID. If you're downloading single artifacts by ID, the output path may change.

What Changed

Previously, single artifact downloads behaved differently depending on how you specified the artifact:

  • By name: name: my-artifact → extracted to path/ (direct)
  • By ID: artifact-ids: 12345 → extracted to path/my-artifact/ (nested)

Now both methods are consistent:

  • By name: name: my-artifact → extracted to path/ (unchanged)
  • By ID: artifact-ids: 12345 → extracted to path/ (fixed - now direct)
Migration Guide
✅ No Action Needed If:
  • You download artifacts by name
  • You download multiple artifacts by ID
  • You already use merge-multiple: true as a workaround
⚠️ Action Required If:

You download single artifacts by ID and your workflows expect the nested directory structure.

Before v5 (nested structure):

- uses: actions/download-artifact@v4
  with:
    artifact-ids: 12345
    path: dist

# Files were in: dist/my-artifact/

Where my-artifact is the name of the artifact you previously uploaded

To maintain old behavior (if needed):

- uses: actions/download-artifact@v5
  with:
    artifact-ids: 12345
    path: dist/my-artifact  # Explicitly specify the nested path

New Contributors

Full Changelog: actions/download-artifact@v4...v5.0.0


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@descope descope bot added the renovate label Jan 2, 2026
@github-actions
Copy link

github-actions bot commented Jan 2, 2026

Coverage report

The coverage rate went from 98.36% to 98.36% ➡️

None of the new lines are part of the tested code. Therefore, there is no coverage data about them.

@descope descope bot force-pushed the renovate/major-7-github-artifact-actions branch from 895630b to 1a12989 Compare February 10, 2026 14:38
@descope descope bot enabled auto-merge (squash) February 10, 2026 14:38
@descope descope bot force-pushed the renovate/major-7-github-artifact-actions branch from 1a12989 to 579b6bf Compare February 10, 2026 18:52
@descope descope bot force-pushed the renovate/major-7-github-artifact-actions branch from 579b6bf to 73831af Compare February 10, 2026 21:29
@descope descope bot force-pushed the renovate/major-7-github-artifact-actions branch from 73831af to 6519031 Compare February 10, 2026 22:06
@descope descope bot force-pushed the renovate/major-7-github-artifact-actions branch from 6519031 to 9e67a65 Compare February 11, 2026 00:19
@descope descope bot merged commit c96afe8 into main Feb 11, 2026
31 checks passed
@descope descope bot deleted the renovate/major-7-github-artifact-actions branch February 11, 2026 00:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants