Skip to content

chore: bump actions/download-artifact from 7.0.0 to 8.0.1 - #1595

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions/download-artifact-8.0.1
Open

chore: bump actions/download-artifact from 7.0.0 to 8.0.1#1595
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions/download-artifact-8.0.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 5, 2026

Copy link
Copy Markdown
Contributor

Bumps actions/download-artifact from 7.0.0 to 8.0.1.

Release notes

Sourced from actions/download-artifact's releases.

v8.0.1

What's Changed

Full Changelog: actions/download-artifact@v8...v8.0.1

v8.0.0

v8 - What's new

[!IMPORTANT] actions/download-artifact@v8 has been migrated to an ESM module. This should be transparent to the caller but forks might need to make significant changes.

[!IMPORTANT] Hash mismatches will now error by default. Users can override this behavior with a setting change (see below).

Direct downloads

To support direct uploads in actions/upload-artifact, the action will no longer attempt to unzip all downloaded files. Instead, the action checks the Content-Type header ahead of unzipping and skips non-zipped files. Callers wishing to download a zipped file as-is can also set the new skip-decompress parameter to true.

Enforced checks (breaking)

A previous release introduced digest checks on the download. If a download hash didn't match the expected hash from the server, the action would log a warning. Callers can now configure the behavior on mismatch with the digest-mismatch parameter. To be secure by default, we are now defaulting the behavior to error which will fail the workflow run.

ESM

To support new versions of the @actions/* packages, we've upgraded the package to ESM.

What's Changed

Full Changelog: actions/download-artifact@v7...v8.0.0

Commits
  • 3e5f45b Add regression tests for CJK characters (#471)
  • e6d03f6 Add a regression test for artifact name + content-type mismatches (#472)
  • 70fc10c Merge pull request #461 from actions/danwkennedy/digest-mismatch-behavior
  • f258da9 Add change docs
  • ccc058e Fix linting issues
  • bd7976b Add a setting to specify what to do on hash mismatch and default it to error
  • ac21fcf Merge pull request #460 from actions/danwkennedy/download-no-unzip
  • 15999bf Add note about package bumps
  • 974686e Bump the version to v8 and add release notes
  • fbe48b1 Update test names to make it clearer what they do
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 7.0.0 to 8.0.1.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@37930b1...3e5f45b)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: 8.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Issue/PR is related to dependencies or updates label Sep 5, 2026
@vercel

vercel Bot commented Sep 5, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
nitro-docs Ready Ready Preview Sep 5, 2026 12:13pm UTC

Request Review

@github-actions

github-actions Bot commented Sep 5, 2026

Copy link
Copy Markdown

Performance Report

⚠️ Advisory: Results do not fail this PR while the baseline is being calibrated.

iOS

Benchmark Before After Difference
JavaScript addNumbers() 31.1 ns 37.0 ns 🔴 +19.1% slower
C++ copy(4 KiB) 1.21 µs 1.70 µs 🔴 +40.94% slower
C++ create() 548.7 ns 669.9 ns 🔴 +22.09% slower
C++ optional trailing string 219.8 ns 237.7 ns 🔴 +8.14% slower
C++ number property get/set 192.9 ns 252.7 ns 🔴 +31.02% slower
TurboModule addNumbers() 1.30 µs 1.53 µs 🔴 +17.7% slower
All Benchmarks
Benchmark Before After Difference
C++ bounce(1 MiB) 408.7 ns 435.8 ns 🟡 +6.64% slower (noisy)
C++ bounce(4 KiB) 422.6 ns 423.0 ns 🟡 +0.09% slower (noisy)
C++ copy(1 MiB) 85.14 µs 99.02 µs 🟡 +16.31% slower (noisy)
C++ large array (1,024) 57.46 µs 61.44 µs 🟡 +6.92% slower (noisy)
C++ small array (16) 1.11 µs 1.28 µs 🟡 +15.91% slower (noisy)
C++ synchronousCallback() 322.8 ns 302.4 ns 🟡 -6.31% faster (noisy)
C++ returnExisting() 283.1 ns 314.6 ns 🟡 +11.14% slower (noisy)
C++ typed map (8 entries) 2.15 µs 2.30 µs 🟡 +7.14% slower (noisy)
C++ addNumbers() 123.4 ns 129.9 ns 🟡 +5.29% slower (noisy)
C++ simpleFunc() 106.9 ns 119.2 ns 🟡 +11.56% slower (noisy)
C++ immediatePromise() 1.21 µs 1.23 µs ℹ️ +1.55% slower (advisory)
C++ short ASCII string 189.5 ns 246.4 ns 🟡 +30.02% slower (noisy)
C++ Unicode string 407.8 ns 467.6 ns 🟡 +14.64% slower (noisy)
C++ nested Car struct 2.80 µs 3.56 µs 🟡 +27.26% slower (noisy)
C++ number | string variant 190.3 ns 208.6 ns 🟡 +9.64% slower (noisy)
Swift bounce(1 MiB) 417.9 ns 446.4 ns 🟡 +6.81% slower (noisy)
Swift bounce(4 KiB) 422.0 ns 471.4 ns 🟡 +11.7% slower (noisy)
Swift copy(1 MiB) 97.84 µs 101.46 µs 🟡 +3.7% slower (noisy)
Swift copy(4 KiB) 1.62 µs 1.80 µs 🟡 +10.62% slower (noisy)
Swift large array (1,024) 63.19 µs 69.36 µs 🟡 +9.76% slower (noisy)
Swift small array (16) 1.37 µs 1.42 µs 🟡 +3.54% slower (noisy)
Swift synchronousCallback() 429.5 ns 426.7 ns 🟡 -0.65% faster (noisy)
Swift create() 38.80 µs 32.39 µs 🟡 -16.52% faster (noisy)
Swift returnExisting() 375.5 ns 361.9 ns 🟡 -3.62% faster (noisy)
Swift typed map (8 entries) 3.57 µs 3.52 µs 🟡 -1.44% faster (noisy)
Swift optional trailing string 239.5 ns 257.5 ns 🟡 +7.52% slower (noisy)
Swift addNumbers() 118.0 ns 151.3 ns 🟡 +28.28% slower (noisy)
Swift simpleFunc() 103.4 ns 102.8 ns 🟡 -0.65% faster (noisy)
Swift immediatePromise() 2.14 µs 2.45 µs ℹ️ +14.49% slower (advisory)
Swift number property get/set 229.7 ns 259.2 ns 🟡 +12.87% slower (noisy)
Swift short ASCII string 247.1 ns 282.0 ns 🟡 +14.11% slower (noisy)
Swift Unicode string 547.2 ns 598.1 ns 🟡 +9.3% slower (noisy)
Swift nested Car struct 3.38 µs 3.64 µs 🟡 +7.81% slower (noisy)
Swift number | string variant 293.4 ns 344.5 ns 🟡 +17.41% slower (noisy)

Android

Performance is unchanged! 😎

All Benchmarks
Benchmark Before After Difference
JavaScript addNumbers() 43.9 ns 43.8 ns ⚪ ~0.23% unchanged
C++ bounce(1 MiB) 612.0 ns 615.1 ns 🟡 +0.51% slower (noisy)
C++ bounce(4 KiB) 589.4 ns 608.9 ns 🟡 +3.32% slower (noisy)
C++ copy(1 MiB) 32.90 µs 33.14 µs ⚪ ~0.73% unchanged
C++ copy(4 KiB) 1.37 µs 1.37 µs ⚪ ~0.13% unchanged
C++ large array (1,024) 83.25 µs 83.03 µs ⚪ ~0.26% unchanged
C++ small array (16) 1.68 µs 1.68 µs ⚪ ~0.11% unchanged
C++ synchronousCallback() 476.1 ns 483.7 ns 🟡 +1.59% slower (noisy)
C++ create() 985.1 ns 973.9 ns 🟡 -1.14% faster (noisy)
C++ returnExisting() 374.3 ns 367.4 ns ⚪ ~1.85% unchanged
C++ typed map (8 entries) 3.34 µs 3.46 µs ⚪ ~3.77% unchanged
C++ optional trailing string 271.5 ns 271.4 ns ⚪ ~0.03% unchanged
C++ addNumbers() 167.3 ns 166.3 ns ⚪ ~0.63% unchanged
C++ simpleFunc() 131.7 ns 131.4 ns ⚪ ~0.24% unchanged
C++ immediatePromise() 1.69 µs 1.69 µs ℹ️ +0.09% slower (advisory)
C++ number property get/set 268.1 ns 266.3 ns ⚪ ~0.66% unchanged
C++ short ASCII string 243.4 ns 245.5 ns ⚪ ~0.88% unchanged
C++ Unicode string 532.6 ns 538.4 ns ⚪ ~1.08% unchanged
C++ nested Car struct 4.36 µs 4.37 µs ⚪ ~0.33% unchanged
C++ number | string variant 254.2 ns 253.9 ns ⚪ ~0.12% unchanged
Kotlin bounce(1 MiB) 1.74 µs 1.74 µs 🟡 +0.13% slower (noisy)
Kotlin bounce(4 KiB) 1.78 µs 1.73 µs 🟡 -2.48% faster (noisy)
Kotlin copy(1 MiB) 441.26 µs 442.26 µs ⚪ ~0.23% unchanged
Kotlin copy(4 KiB) 8.28 µs 8.23 µs ⚪ ~0.51% unchanged
Kotlin large array (1,024) 91.42 µs 91.54 µs ⚪ ~0.12% unchanged
Kotlin small array (16) 2.24 µs 2.24 µs ⚪ ~0.15% unchanged
Kotlin synchronousCallback() 1.63 µs 1.67 µs ⚪ ~2.49% unchanged
Kotlin create() 2.89 µs 2.89 µs ⚪ ~0.07% unchanged
Kotlin returnExisting() 1.22 µs 1.21 µs ⚪ ~0.82% unchanged
Kotlin typed map (8 entries) 13.06 µs 13.07 µs ⚪ ~0.03% unchanged
Kotlin optional trailing string 667.5 ns 668.2 ns ⚪ ~0.11% unchanged
Kotlin addNumbers() 259.2 ns 269.8 ns 🟡 +4.09% slower (noisy)
Kotlin simpleFunc() 210.8 ns 211.0 ns ⚪ ~0.08% unchanged
Kotlin immediatePromise() 4.45 µs 4.40 µs ℹ️ -1.03% faster (advisory)
Kotlin number property get/set 543.9 ns 540.2 ns ⚪ ~0.67% unchanged
Kotlin short ASCII string 893.6 ns 913.5 ns ⚪ ~2.23% unchanged
Kotlin Unicode string 1.45 µs 1.48 µs ⚪ ~1.95% unchanged
Kotlin nested Car struct 9.56 µs 9.50 µs ⚪ ~0.59% unchanged
Kotlin number | string variant 838.7 ns 839.9 ns ⚪ ~0.14% unchanged
TurboModule addNumbers() 523.3 ns 538.8 ns ⚪ ~2.96% unchanged

Benchmarking Code Diff fe50d8fc...df17bdc0 (view raw output)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Issue/PR is related to dependencies or updates

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants