Skip to content

⬆️ Bump dawidd6/action-download-artifact from 3 to 14 - #50

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/dawidd6/action-download-artifact-14
Closed

⬆️ Bump dawidd6/action-download-artifact from 3 to 14#50
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/dawidd6/action-download-artifact-14

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Feb 2, 2026

Copy link
Copy Markdown
Contributor

Bumps dawidd6/action-download-artifact from 3 to 14.

Release notes

Sourced from dawidd6/action-download-artifact's releases.

v14

What's Changed

Full Changelog: dawidd6/action-download-artifact@v13...v14

v13

What's Changed

New Contributors

Full Changelog: dawidd6/action-download-artifact@v12...v13

v12

What's Changed

Full Changelog: dawidd6/action-download-artifact@v11...v12

v11

Full Changelog: dawidd6/action-download-artifact@v10...v11

... (truncated)

Commits

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

Bumps [dawidd6/action-download-artifact](https://github.com/dawidd6/action-download-artifact) from 3 to 14.
- [Release notes](https://github.com/dawidd6/action-download-artifact/releases)
- [Commits](dawidd6/action-download-artifact@v3...v14)

---
updated-dependencies:
- dependency-name: dawidd6/action-download-artifact
  dependency-version: '14'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Feb 2, 2026
@netlify

netlify Bot commented Feb 2, 2026

Copy link
Copy Markdown

Deploy Preview for timely-seahorse-68815c ready!

Name Link
🔨 Latest commit 98767d3
🔍 Latest deploy log https://app.netlify.com/projects/timely-seahorse-68815c/deploys/6980514c27cdca00084d9322
😎 Deploy Preview https://deploy-preview-50--timely-seahorse-68815c.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

mmcky added a commit that referenced this pull request Aug 5, 2026
…#54)

Lands #51, #52, #53 and #50 as one change, and salvages the -n flag from #25.

- runs-on: disk=large -> volume=80gb, plus spot=false, on all four GPU
  workflows. Now matches lecture-jax and lecture-python.myst byte for byte,
  allowing for collab.yml's different image.
- Explicit permissions blocks on ci.yml, collab.yml and publish.yml so the
  default workflow token can drop to read. ci.yml and collab.yml also gain
  actions: read, which #53 declared only on publish.yml.
- dawidd6/action-download-artifact -> @v21 at all four call sites; collab.yml
  was still on v3 while the rest were on v9.
- -n added to the ci.yml PDF build so it matches publish.yml, closing a gap
  where a nitpick-class error passed the PR check and failed at publish time.

#51, #52 and #53 conflicted pairwise over the same region of ci.yml and
collab.yml, so they are resolved once here rather than through two sequential
rebases. Part of the rollout tracked in QuantEcon/meta#330, with the
permissions work from QuantEcon/meta#347.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
@mmcky

mmcky commented Aug 5, 2026

Copy link
Copy Markdown
Contributor

Superseded by #54, which took all four call sites to @v21 instead of @v14.

The change here was correct — collab.yml was the only file left on v3 while the rest were on v9 — but v14 is a poor landing point. It had one day of soak when this was opened, sits directly on v13's CommonJS-to-ESM rewrite, and is now seven majors behind. v21 has roughly three months of soak, an identical input surface for the four inputs this repo uses (workflow, branch, name, path), runs on node24 so it clears the Node 20 deprecation warning that v14 keeps, and matches what lecture-jax already runs green.

Closing rather than waiting for dependabot to supersede it: it has superseded its own PRs here five times (#39#41#42#47#50) but has opened nothing in this repo since 2026-02-02 despite a weekly schedule and v15–v21 shipping, so it appears dormant.

Recorded for completeness: allow_forks defaulted true in v3 and false from v9 on, so collab.yml's behaviour does change. It is inert here because the step pins branch: main against an upstream workflow, so the runs being searched are never fork runs.

@mmcky mmcky closed this Aug 5, 2026
@dependabot @github

dependabot Bot commented on behalf of github Aug 5, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/github_actions/dawidd6/action-download-artifact-14 branch August 5, 2026 03:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant