actions / download-artifact

MIT License
1.44k stars 495 forks source link

Update @actions/artifact version, bump dependencies #341

Closed robherley closed 4 months ago

robherley commented 4 months ago

Includes changes from:

Also updates some package dependencies from npm audit fix.

polarathene commented 1 month ago

The 4.1.8 release is tied to the merge commit of this PR:

Download action repository 'actions/download-artifact@v4' (SHA:fa0a91b85d4f404e444e00e005971372dc801d16)

Still triggers the deprecation warning though:

(node:1770) [DEP0005] DeprecationWarning: Buffer() is deprecated due to security and usability issues.
Please use the Buffer.alloc(), Buffer.allocUnsafe(), or Buffer.from() methods instead.

Related issues:

The related dependency released it with 2.1.8, which is required: https://github.com/actions/toolkit/issues/1618#issuecomment-2142510903

Despite the download-artifact 4.1.8 release though, the package.json and lock are still versioned for 4.1.7?:

https://github.com/actions/download-artifact/blob/d0ce8fd1167ed839810201de977912a090ab10a7/package.json#L3 https://github.com/actions/download-artifact/blob/d0ce8fd1167ed839810201de977912a090ab10a7/package-lock.json#L3 https://github.com/actions/download-artifact/blob/d0ce8fd1167ed839810201de977912a090ab10a7/package-lock.json#L9