Bump actions/download-artifact from 5 to 8#1584
Bump actions/download-artifact from 5 to 8#1584dependabot[bot] wants to merge 1 commit intomasterfrom
Conversation
Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 5 to 8. - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](actions/download-artifact@v5...v8) --- updated-dependencies: - dependency-name: actions/download-artifact dependency-version: '8' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
|
Important PR Analysis SkippedPR analysis skipped for dependabot PRs as per the configuration setting. Run a manually review by commenting /matter review 💡Tips to use MatterAICommand List
|
|
Summary By MatterAI
🔄 What ChangedUpdated the 🔍 Impact of the ChangeEnsures the CI/CD pipeline uses the latest stable version of the artifact download utility, maintaining compatibility with GitHub's infrastructure and benefiting from upstream bug fixes or performance improvements. 📁 Total Files ChangedClick to Expand
🧪 Test Added/RecommendedRecommended
🔒 Security VulnerabilitiesNo direct vulnerabilities introduced. Using pinned versions or the latest stable releases is a security best practice to avoid deprecated dependencies. ⏳ Estimated code review effortLOW (~2 minutes) Tip Quality Recommendations
♫ Tanka Poem
Sequence DiagramsequenceDiagram
participant G as GitHub Runner
participant A as Artifact Store
participant C as CocoaPods
Note over G: Start Release Workflow
G->>A: download-artifact@v8 (Request Build Artifacts)
A-->>G: Build Artifacts Delivered
Note over G: Bundle Install & Config
G->>C: Publish to CocoaPods
C-->>G: Success
|
![matterai-app[bot]](https://avatars.githubusercontent.com/in/474549?s=60&v=4){kind=small}
| bundle check || bundle install | ||
| - name: Download build artifacts | ||
| uses: actions/download-artifact@v5 | ||
| uses: actions/download-artifact@v8 |
There was a problem hiding this comment.
🔴 Build Breakage
Issue: The version v8 for actions/download-artifact does not exist. The latest major version of actions/download-artifact is v4. Using a non-existent version tag will cause the GitHub Actions workflow to fail immediately during initialization.
Fix: Update the version to the actual latest release, which is v4.
Impact: Prevents the CI/CD pipeline from breaking due to an invalid action version.
| uses: actions/download-artifact@v8 | |
| uses: actions/download-artifact@v4 |
Bumps actions/download-artifact from 5 to 8.
Release notes
Sourced from actions/download-artifact's releases.
... (truncated)
Commits
70fc10cMerge pull request #461 from actions/danwkennedy/digest-mismatch-behaviorf258da9Add change docsccc058eFix linting issuesbd7976bAdd a setting to specify what to do on hash mismatch and default it toerrorac21fcfMerge pull request #460 from actions/danwkennedy/download-no-unzip15999bfAdd note about package bumps974686eBump the version tov8and add release notesfbe48b1Update test names to make it clearer what they do96bf374One more test fixb8c4819Fix skip decompress testDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)