Skip to content

build(deps): bump actions/download-artifact from 4 to 8#12

Open
dependabot[bot] wants to merge 47 commits into
mainfrom
dependabot/github_actions/actions/download-artifact-8
Open

build(deps): bump actions/download-artifact from 4 to 8#12
dependabot[bot] wants to merge 47 commits into
mainfrom
dependabot/github_actions/actions/download-artifact-8

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github Mar 8, 2026

Bumps actions/download-artifact from 4 to 8.

Release notes

Sourced from actions/download-artifact's releases.

v8.0.0

v8 - What's new

Direct downloads

To support direct uploads in actions/upload-artifact, the action will no longer attempt to unzip all downloaded files. Instead, the action checks the Content-Type header ahead of unzipping and skips non-zipped files. Callers wishing to download a zipped file as-is can also set the new skip-decompress parameter to false.

Enforced checks (breaking)

A previous release introduced digest checks on the download. If a download hash didn't match the expected hash from the server, the action would log a warning. Callers can now configure the behavior on mismatch with the digest-mismatch parameter. To be secure by default, we are now defaulting the behavior to error which will fail the workflow run.

ESM

To support new versions of the @actions/* packages, we've upgraded the package to ESM.

What's Changed

Full Changelog: actions/download-artifact@v7...v8.0.0

v7.0.0

v7 - What's new

[!IMPORTANT] actions/download-artifact@v7 now runs on Node.js 24 (runs.using: node24) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.

Node.js 24

This release updates the runtime to Node.js 24. v6 had preliminary support for Node 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.

What's Changed

New Contributors

Full Changelog: actions/download-artifact@v6.0.0...v7.0.0

v6.0.0

What's Changed

BREAKING CHANGE: this update supports Node v24.x. This is not a breaking change per-se but we're treating it as such.

... (truncated)

Commits
  • 70fc10c Merge pull request #461 from actions/danwkennedy/digest-mismatch-behavior
  • f258da9 Add change docs
  • ccc058e Fix linting issues
  • bd7976b Add a setting to specify what to do on hash mismatch and default it to error
  • ac21fcf Merge pull request #460 from actions/danwkennedy/download-no-unzip
  • 15999bf Add note about package bumps
  • 974686e Bump the version to v8 and add release notes
  • fbe48b1 Update test names to make it clearer what they do
  • 96bf374 One more test fix
  • b8c4819 Fix skip decompress test
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

MohamedBabker and others added 30 commits September 6, 2025 19:42
Allowing everyone to work on the individual files and run the app locally.
I downloaded npm to be able to run locally on my machine as well as add auth path
downloading npm to run on dev server & adding auth page for sign up and log in.
Add sign-in and sign-up pages with placeholder logic
Implement autosave, version history tracking, and Cosmos DB integration for document persistence. Add reset button to clear all version history with confirmation dialog. Include localStorage fallback for offline support.
…ates

feat: add version control with Cosmos DB and reset functionality
Add dashboard page with placeholder
Adding a feature that can be added due to being ahead of schedule
Trillymatt and others added 17 commits December 4, 2025 00:13
Implemented Foundry AI from Microsoft using OpenAI chatgpt 5.1 for chat about resume and adding inline edits as well.
AI chat backend working with foundry which is needed for the imagine cup. LLM being used to read resume and suggest changes to resume based on information provided to make better. This feature does not change the words on the resume yet.
…tical fixes

- Added Claude AI integration via secure MCP server with API authentication
- Implemented multi-format support (PDF, DOCX, LaTeX, RTF, TXT)
- Complete landing page redesign for new product capabilities
- Fixed critical PDF upload parsing and export corruption bugs
- Implemented working user profile dropdown with sign out/re-login
- Fixed guide modal close button and improved UI consistency
- Updated design system with Claude branding and consistent iconography
- Added comprehensive security measures for API key protection
- Enhanced document parsing and export for professional output
- Removed template selector and updated all product messaging

BREAKING CHANGES: Major architecture overhaul with new authentication flow and document handling system.

This transforms the product into a fully-functional, enterprise-ready resume editor with AI assistance.
- Added Claude AI integration via secure MCP server with API authentication
- Implemented multi-format support (PDF, DOCX, LaTeX, RTF, TXT)
- Complete landing page redesign for new product capabilities
- Implemented working user profile dropdown with sign out/re-login
- Fixed guide modal close button and improved UI consistency
- Updated design system with Claude branding and consistent iconography
- Added comprehensive security measures for API key protection
- Enhanced document parsing and export for professional output
- Removed template selector and updated all product messaging
…v, test, stage, prod)

Replace server-only CI with full-stack workflows covering both Next.js frontend
and Express backend. Deployments are branch-driven (develop→dev, test→test,
staging→stage, main→prod) with manual dispatch support.
…ment

Provision all Azure resources (CosmosDB, Blob Storage, Container Apps,
App Service, Redis, ACR, Monitoring) across dev/test/stage/prod with
environment-specific sizing via tfvars files.
# Conflicts:
#	package-lock.json
Changes for backend to work with sup abase as well as the auth. Project is working on local and AWS with good auth and backend migrated
- Fix handleFileUpload to use actual parsed file content instead of hardcoded data
- Add real DOCX export using docx library (was faking it with RTF)
- Improve parseResumeText with smart date/location extraction and better entry detection
- Add 10MB file size validation on upload
- Remove dead code: unused suggestion popup, formatLastSaved, stale state variables
- Fix VersionHistory type mismatch for optional content field

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
…envs

- Add GitHub Actions Terraform workflow for dev/test/stage/prod (validate + plan)
- Add missing Terraform CosmosDB module (account, SQL database, containers)
- Document per-env backend state keys in init-backend.sh
- Fix deploy workflow server artifact paths for correct upload
- Add multi-stage server Dockerfile with /api/health check
- Add frontend Dockerfile (Next.js standalone) and DOCKER_BUILD in next.config

Made-with: Cursor
- CI: add timeouts, NODE_VERSION env, job summaries
- Deploy: add branch output, deployment summary job, structured notifications
- Terraform: add fmt check, job summary
- Add dependabot.yml for npm and github-actions
- Add CodeQL security analysis workflow
- Add PULL_REQUEST_TEMPLATE.md
- Terraform: cost allocation tags, environment output, tfvars.example
- Terraform: storage lifecycle block, .terraform-version, README

Made-with: Cursor
Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 4 to 8.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@v4...v8)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: '8'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Mar 8, 2026
@namesarnav namesarnav self-requested a review as a code owner March 27, 2026 06:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants