The release of upload-artifact@v4 and download-artifact@v4 are major changes to the backend architecture of Artifacts. They have numerous performance and behavioral improvements.
ℹ️ However, this is a major update that includes breaking changes. Artifacts created with versions v3 and below are not compatible with the v4 actions. Uploads and downloads must use the same major actions versions. There are also key differences from previous versions that may require updates to your workflows.
Fixed a bug in Node16 where if an HTTP download finished too quickly (<1ms, e.g. when it's mocked) we attempt to delete a temp file that has not been created yet actions/toolkit#1278
⚠️ This version requires Node 20 or later on the runner! If you are using GitHub-managed runners, no action is needed. If you are using self-hosted runners, make sure the system version of Node is version 20 or higher. Reverted based on community feedback.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
- `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
- `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency
- `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
Bumps the github-actions group with 4 updates: actions/download-artifact, hashicorp/vault-action, google-github-actions/auth and google-github-actions/upload-cloud-storage.
Updates
actions/download-artifact
from 3 to 4Release notes
Sourced from actions/download-artifact's releases.
Commits
6b208ae
Merge pull request #274 from actions/vmjoseph/timeout-patch6c5b580
only adding updated license5f5015d
readding index1fddaaf
Revert "updating licenses"8aa9e21
Revert "updating dist"657edd9
updating licenses555a2fc
updating dist4fc4d70
updating lock072ac9d
updating version no038dc03
updating version noUpdates
hashicorp/vault-action
from 2.7.4 to 2.8.0Release notes
Sourced from hashicorp/vault-action's releases.
Changelog
Sourced from hashicorp/vault-action's changelog.
Commits
9f522b8
Update to v2.8.0 (#519)efab57e
feature: add ignoreNotFound option (#518)d523bb0
chore(deps-dev): bump@vercel/ncc
from 0.36.1 to 0.38.1 (#503)11845b1
chore(deps-dev): bump jest from 29.5.0 to 29.7.0 (#490)7a6258b
chore(deps-dev): bump jest-when from 3.5.2 to 3.6.0 (#484)a0b66b1
chore(deps-dev): bump@actions/core
from 1.10.0 to 1.10.1 (#489)c616aba
chore(deps): bump jsrsasign from 10.8.6 to 11.0.0 (#513)e3d5714
Update to v2.7.5 (#517)00bce0d
Add path parameter example (#511)6853090
Use nodejs 20 (#509)Updates
google-github-actions/auth
from 1 to 2Release notes
Sourced from google-github-actions/auth's releases.
... (truncated)
Commits
5a50e58
Release: v2.1.0 (#385)aaf2e69
Update deps (#384)f6de816
Release: v2.0.1 (#382)a57dd04
Support newline-separated inputs for delegates and access_token_scopes (#381)fb74905
Note .dockerignore in the exclusion for credentials (#376)56562dd
Use new markdown syntax for alerts (#371)5f7afaa
Add service_account to WIF through SA example (#369)82c1c58
Update README and CI to use latest version (#365)5e5db2b
Document that project_id might be required (#367)b372ba4
Remove broken markdown links (#362)Updates
google-github-actions/upload-cloud-storage
from 1 to 2Release notes
Sourced from google-github-actions/upload-cloud-storage's releases.
Commits
22121cd
Release: v2.1.0 (#352)630411a
Update deps (#351)d278d8c
Release: v2.0.0 (#347)5d472e4
Upgrade deps and drop unnecessary dependencies (#346)490e8b9
Add CI for release branches (#345)fa45b5c
Allow integration tests on dispatch (#338)ff23d2d
update all deps (#335)9824cc9
dependabot: only do security updates (#334)99ea8dc
checkout is mandatory (#330)5e040a7
Fix README gzip description (#329)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show