[PR #683] [CLOSED] chore(deps): update github artifact actions (major) - autoclosed #682

New issue

Closed

opened 2026-03-03 14:32:18 +03:00 by kerem · 0 comments

kerem commented

2026-03-03 14:32:18 +03:00

Owner

📋 Pull Request Information

Original PR: https://github.com/konstruktoid/hardening/pull/683
Author: @renovate[bot]
Created: 10/24/2025
Status: ❌ Closed

Base: master ← Head: renovate/major-github-artifact-actions

📝 Commits (1)

a1bc1d0 chore(deps): update github artifact actions

📊 Changes

2 files changed (+3 additions, -3 deletions)

View changed files

📝 .github/workflows/scorecards.yml (+1 -1)
📝 .github/workflows/slsa.yml (+2 -2)

📄 Description

This PR contains the following updates:

Package	Type	Update	Change
actions/download-artifact	action	major	`v5.0.0` -> `v6.0.0`
actions/upload-artifact	action	major	`v4.6.2` -> `v5.0.0`

Release Notes

actions/download-artifact (actions/download-artifact)

`v6.0.0`

Compare Source

What's Changed

BREAKING CHANGE: this update supports Node v24.x. This is not a breaking change per-se but we're treating it as such.

Update README for download-artifact v5 changes by @yacaovsnc in #417
Update README with artifact extraction details by @yacaovsnc in #424
Readme: spell out the first use of GHES by @danwkennedy in #431
Bump @actions/artifact to v4.0.0
Prepare v6.0.0 by @danwkennedy in #438

New Contributors

@danwkennedy made their first contribution in #431

Full Changelog: https://github.com/actions/download-artifact/compare/v5...v6.0.0

actions/upload-artifact (actions/upload-artifact)

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/konstruktoid/hardening/pull/683 **Author:** [@renovate[bot]](https://github.com/apps/renovate) **Created:** 10/24/2025 **Status:** ❌ Closed **Base:** `master` ← **Head:** `renovate/major-github-artifact-actions` --- ### 📝 Commits (1) - [`a1bc1d0`](https://github.com/konstruktoid/hardening/commit/a1bc1d073a3973382321fc1eab0fc3c4acd820c1) chore(deps): update github artifact actions ### 📊 Changes **2 files changed** (+3 additions, -3 deletions) <details> <summary>View changed files</summary> 📝 `.github/workflows/scorecards.yml` (+1 -1) 📝 `.github/workflows/slsa.yml` (+2 -2) </details> ### 📄 Description This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/download-artifact](https://redirect.github.com/actions/download-artifact) | action | major | `v5.0.0` -> `v6.0.0` | | [actions/upload-artifact](https://redirect.github.com/actions/upload-artifact) | action | major | `v4.6.2` -> `v5.0.0` | --- ### Release Notes <details> <summary>actions/download-artifact (actions/download-artifact)</summary> ### [`v6.0.0`](https://redirect.github.com/actions/download-artifact/releases/tag/v6.0.0) [Compare Source](https://redirect.github.com/actions/download-artifact/compare/v5.0.0...v6.0.0) #### What's Changed **BREAKING CHANGE:** this update supports Node `v24.x`. This is not a breaking change per-se but we're treating it as such. - Update README for download-artifact v5 changes by [@yacaovsnc](https://redirect.github.com/yacaovsnc) in [#417](https://redirect.github.com/actions/download-artifact/pull/417) - Update README with artifact extraction details by [@yacaovsnc](https://redirect.github.com/yacaovsnc) in [#424](https://redirect.github.com/actions/download-artifact/pull/424) - Readme: spell out the first use of GHES by [@danwkennedy](https://redirect.github.com/danwkennedy) in [#431](https://redirect.github.com/actions/download-artifact/pull/431) - Bump `@actions/artifact` to `v4.0.0` - Prepare `v6.0.0` by [@danwkennedy](https://redirect.github.com/danwkennedy) in [#438](https://redirect.github.com/actions/download-artifact/pull/438) #### New Contributors - [@danwkennedy](https://redirect.github.com/danwkennedy) made their first contribution in [#431](https://redirect.github.com/actions/download-artifact/pull/431) **Full Changelog**: <https://github.com/actions/download-artifact/compare/v5...v6.0.0> </details> <details> <summary>actions/upload-artifact (actions/upload-artifact)</summary> ### [`v5.0.0`](https://redirect.github.com/actions/upload-artifact/compare/v4.6.2...v5.0.0) [Compare Source](https://redirect.github.com/actions/upload-artifact/compare/v4.6.2...v5.0.0) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/konstruktoid/hardening).  --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>