[!IMPORTANT]
actions/download-artifact@v8 has been migrated to an ESM module. This should be transparent to the caller but forks might need to make significant changes.
[!IMPORTANT]
Hash mismatches will now error by default. Users can override this behavior with a setting change (see below).
Direct downloads
To support direct uploads in actions/upload-artifact, the action will no longer attempt to unzip all downloaded files. Instead, the action checks the Content-Type header ahead of unzipping and skips non-zipped files. Callers wishing to download a zipped file as-is can also set the new skip-decompress parameter to true.
Enforced checks (breaking)
A previous release introduced digest checks on the download. If a download hash didn't match the expected hash from the server, the action would log a warning. Callers can now configure the behavior on mismatch with the digest-mismatch parameter. To be secure by default, we are now defaulting the behavior to error which will fail the workflow run.
ESM
To support new versions of the @actions/* packages, we've upgraded the package to ESM.
[!IMPORTANT]
actions/download-artifact@v7 now runs on Node.js 24 (runs.using: node24) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.
Node.js 24
This release updates the runtime to Node.js 24. v6 had preliminary support for Node 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.
What's Changed
Update GHES guidance to include reference to Node 20 version by @patrikpolyak in #440
BREAKING fix: inconsistent path behavior for single artifact downloads by ID by @GrantBirki in #416
v5.0.0
🚨 Breaking Change
This release fixes an inconsistency in path behavior for single artifact downloads by ID. If you're downloading single artifacts by ID, the output path may change.
What Changed
Previously, single artifact downloads behaved differently depending on how you specified the artifact:
By name: name: my-artifact → extracted to path/ (direct)
By ID: artifact-ids: 12345 → extracted to path/my-artifact/ (nested)
Now both methods are consistent:
By name: name: my-artifact → extracted to path/ (unchanged)
By ID: artifact-ids: 12345 → extracted to path/ (fixed - now direct)
Migration Guide
✅ No Action Needed If:
You download artifacts by name
You download multiple artifacts by ID
You already use merge-multiple: true as a workaround
⚠️ Action Required If:
You download single artifacts by ID and your workflows expect the nested directory structure.
Before v5 (nested structure):
- uses:actions/download-artifact@v4with:artifact-ids:12345path:dist# Files were in: dist/my-artifact/
Where my-artifact is the name of the artifact you previously uploaded
To maintain old behavior (if needed):
- uses:actions/download-artifact@v5with:artifact-ids:12345path:dist/my-artifact # Explicitly specify the nested path
Adds support for uploading single files directly (unzipped). Callers can set the new archive parameter to false to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The name parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.
ESM
To support new versions of the @actions/* packages, we've upgraded the package to ESM.
[!IMPORTANT]
actions/upload-artifact@v6 now runs on Node.js 24 (runs.using: node24) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.
Node.js 24
This release updates the runtime to Node.js 24. v5 had preliminary support for Node.js 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [actions/checkout](https://github.com/actions/checkout) | action | major | `v6` → `v7` |
| [actions/download-artifact](https://github.com/actions/download-artifact) | action | major | `v4` → `v8` |
| [actions/setup-java](https://github.com/actions/setup-java) | action | major | `v5` → `v6` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | action | major | `v4` → `v7` |
| [ubuntu](https://github.com/actions/runner-images) | github-runner | major | `24.04` → `26.04` |
---
### Release Notes
<details>
<summary>actions/checkout</summary>
### [`v7.0.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v701)
[Compare Source](https://github.com/actions/checkout/compare/v7.0.0...v7.0.1)
- Skip running unsafe pr check if input is default by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2518](https://github.com/actions/checkout/pull/2518)
- Trim only ascii whitespace for branch by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2521](https://github.com/actions/checkout/pull/2521)
- Escape values passed to --unset by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2530](https://github.com/actions/checkout/pull/2530)
- Various dependency updates
### [`v7.0.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v700)
[Compare Source](https://github.com/actions/checkout/compare/v6.1.0...v7.0.0)
- Block checking out fork PR for pull_request_target and workflow_run by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2454](https://github.com/actions/checkout/pull/2454)
- Various dependency updates
</details>
<details>
<summary>actions/download-artifact</summary>
### [`v8.0.2`](https://github.com/actions/download-artifact/releases/tag/v8.0.2)
[Compare Source](https://github.com/actions/download-artifact/compare/v8.0.1...v8.0.2)
#### What's Changed
- Update the readme by [@​danwkennedy](https://github.com/danwkennedy) in [#​473](https://github.com/actions/download-artifact/pull/473)
- Improves artifact download retries when the service returns HTTP 429 (rate limiting), including honoring valid Retry-After headers.
- Update [@​actions/artifact](https://github.com/actions/artifact) to 6.3.1 by [@​tunc-d](https://github.com/tunc-d) in [#​492](https://github.com/actions/download-artifact/pull/492)
- Prepare download-artifact v8.0.2 by [@​tunc-d](https://github.com/tunc-d) in [#​493](https://github.com/actions/download-artifact/pull/493)
#### New Contributors
- [@​tunc-d](https://github.com/tunc-d) made their first contribution in [#​492](https://github.com/actions/download-artifact/pull/492)
**Full Changelog**: <https://github.com/actions/download-artifact/compare/v8.0.1...v8.0.2>
### [`v8.0.1`](https://github.com/actions/download-artifact/releases/tag/v8.0.1)
[Compare Source](https://github.com/actions/download-artifact/compare/v8.0.0...v8.0.1)
#### What's Changed
- Support for CJK characters in the artifact name by [@​danwkennedy](https://github.com/danwkennedy) in [#​471](https://github.com/actions/download-artifact/pull/471)
- Add a regression test for artifact name + content-type mismatches by [@​danwkennedy](https://github.com/danwkennedy) in [#​472](https://github.com/actions/download-artifact/pull/472)
**Full Changelog**: <https://github.com/actions/download-artifact/compare/v8...v8.0.1>
### [`v8.0.0`](https://github.com/actions/download-artifact/releases/tag/v8.0.0)
[Compare Source](https://github.com/actions/download-artifact/compare/v7.0.0...v8.0.0)
#### v8 - What's new
> \[!IMPORTANT]
> actions/download-artifact\@​v8 has been migrated to an ESM module. This should be transparent to the caller but forks might need to make significant changes.
> \[!IMPORTANT]
> Hash mismatches will now error by default. Users can override this behavior with a setting change (see below).
##### Direct downloads
To support direct uploads in `actions/upload-artifact`, the action will no longer attempt to unzip all downloaded files. Instead, the action checks the `Content-Type` header ahead of unzipping and skips non-zipped files. Callers wishing to download a zipped file as-is can also set the new `skip-decompress` parameter to `true`.
##### Enforced checks (breaking)
A previous release introduced digest checks on the download. If a download hash didn't match the expected hash from the server, the action would log a warning. Callers can now configure the behavior on mismatch with the `digest-mismatch` parameter. To be secure by default, we are now defaulting the behavior to `error` which will fail the workflow run.
##### ESM
To support new versions of the @​actions/\* packages, we've upgraded the package to ESM.
#### What's Changed
- Don't attempt to un-zip non-zipped downloads by [@​danwkennedy](https://github.com/danwkennedy) in [#​460](https://github.com/actions/download-artifact/pull/460)
- Add a setting to specify what to do on hash mismatch and default it to `error` by [@​danwkennedy](https://github.com/danwkennedy) in [#​461](https://github.com/actions/download-artifact/pull/461)
**Full Changelog**: <https://github.com/actions/download-artifact/compare/v7...v8.0.0>
### [`v7.0.0`](https://github.com/actions/download-artifact/releases/tag/v7.0.0)
[Compare Source](https://github.com/actions/download-artifact/compare/v6.0.0...v7.0.0)
#### v7 - What's new
> \[!IMPORTANT]
> actions/download-artifact\@​v7 now runs on Node.js 24 (`runs.using: node24`) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.
##### Node.js 24
This release updates the runtime to Node.js 24. v6 had preliminary support for Node 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.
#### What's Changed
- Update GHES guidance to include reference to Node 20 version by [@​patrikpolyak](https://github.com/patrikpolyak) in [#​440](https://github.com/actions/download-artifact/pull/440)
- Download Artifact Node24 support by [@​salmanmkc](https://github.com/salmanmkc) in [#​415](https://github.com/actions/download-artifact/pull/415)
- fix: update [@​actions/artifact](https://github.com/actions/artifact) to fix Node.js 24 punycode deprecation by [@​salmanmkc](https://github.com/salmanmkc) in [#​451](https://github.com/actions/download-artifact/pull/451)
- prepare release v7.0.0 for Node.js 24 support by [@​salmanmkc](https://github.com/salmanmkc) in [#​452](https://github.com/actions/download-artifact/pull/452)
#### New Contributors
- [@​patrikpolyak](https://github.com/patrikpolyak) made their first contribution in [#​440](https://github.com/actions/download-artifact/pull/440)
- [@​salmanmkc](https://github.com/salmanmkc) made their first contribution in [#​415](https://github.com/actions/download-artifact/pull/415)
**Full Changelog**: <https://github.com/actions/download-artifact/compare/v6.0.0...v7.0.0>
### [`v6.0.0`](https://github.com/actions/download-artifact/releases/tag/v6.0.0)
[Compare Source](https://github.com/actions/download-artifact/compare/v5.0.0...v6.0.0)
#### What's Changed
**BREAKING CHANGE:** this update supports Node `v24.x`. This is not a breaking change per-se but we're treating it as such.
- Update README for download-artifact v5 changes by [@​yacaovsnc](https://github.com/yacaovsnc) in [#​417](https://github.com/actions/download-artifact/pull/417)
- Update README with artifact extraction details by [@​yacaovsnc](https://github.com/yacaovsnc) in [#​424](https://github.com/actions/download-artifact/pull/424)
- Readme: spell out the first use of GHES by [@​danwkennedy](https://github.com/danwkennedy) in [#​431](https://github.com/actions/download-artifact/pull/431)
- Bump `@actions/artifact` to `v4.0.0`
- Prepare `v6.0.0` by [@​danwkennedy](https://github.com/danwkennedy) in [#​438](https://github.com/actions/download-artifact/pull/438)
#### New Contributors
- [@​danwkennedy](https://github.com/danwkennedy) made their first contribution in [#​431](https://github.com/actions/download-artifact/pull/431)
**Full Changelog**: <https://github.com/actions/download-artifact/compare/v5...v6.0.0>
### [`v5.0.0`](https://github.com/actions/download-artifact/releases/tag/v5.0.0)
[Compare Source](https://github.com/actions/download-artifact/compare/v4.3.0...v5.0.0)
#### What's Changed
- Update README.md by [@​nebuk89](https://github.com/nebuk89) in [#​407](https://github.com/actions/download-artifact/pull/407)
- BREAKING fix: inconsistent path behavior for single artifact downloads by ID by [@​GrantBirki](https://github.com/GrantBirki) in [#​416](https://github.com/actions/download-artifact/pull/416)
#### v5.0.0
##### 🚨 Breaking Change
This release fixes an inconsistency in path behavior for single artifact downloads by ID. **If you're downloading single artifacts by ID, the output path may change.**
##### What Changed
Previously, **single artifact downloads** behaved differently depending on how you specified the artifact:
- **By name**: `name: my-artifact` → extracted to `path/` (direct)
- **By ID**: `artifact-ids: 12345` → extracted to `path/my-artifact/` (nested)
Now both methods are consistent:
- **By name**: `name: my-artifact` → extracted to `path/` (unchanged)
- **By ID**: `artifact-ids: 12345` → extracted to `path/` (fixed - now direct)
##### Migration Guide
##### ✅ No Action Needed If:
- You download artifacts by **name**
- You download **multiple** artifacts by ID
- You already use `merge-multiple: true` as a workaround
##### ⚠️ Action Required If:
You download **single artifacts by ID** and your workflows expect the nested directory structure.
**Before v5 (nested structure):**
```yaml
- uses: actions/download-artifact@v4
with:
artifact-ids: 12345
path: dist
# Files were in: dist/my-artifact/
```
> Where `my-artifact` is the name of the artifact you previously uploaded
**To maintain old behavior (if needed):**
```yaml
- uses: actions/download-artifact@v5
with:
artifact-ids: 12345
path: dist/my-artifact # Explicitly specify the nested path
```
#### New Contributors
- [@​nebuk89](https://github.com/nebuk89) made their first contribution in [#​407](https://github.com/actions/download-artifact/pull/407)
**Full Changelog**: <https://github.com/actions/download-artifact/compare/v4...v5.0.0>
</details>
<details>
<summary>actions/setup-java</summary>
### [`v6.1.0`](https://github.com/actions/setup-java/releases/tag/v6.1.0)
[Compare Source](https://github.com/actions/setup-java/compare/v6.0.1...v6.1.0)
##### What's Changed
- Preserve compound Liberica build versions from .sdkmanrc by [@​brunoborges](https://github.com/brunoborges) with [@​Copilot](https://github.com/Copilot) in [#​1268](https://github.com/actions/setup-java/pull/1268)
- Support Temurin on Linux RISC-V by [@​yawkat](https://github.com/yawkat) in [#​1269](https://github.com/actions/setup-java/pull/1269)
- Stop GPG agent before removing signature-verification home by [@​brunoborges](https://github.com/brunoborges) with [@​Copilot](https://github.com/Copilot) in [#​1273](https://github.com/actions/setup-java/pull/1273)
- Prefer Zulu 4-segment hotfix builds when resolving version ranges by [@​brunoborges](https://github.com/brunoborges) in [#​1278](https://github.com/actions/setup-java/pull/1278)
- Support Temurin JEP 322 patch versions like 26.0.2.1+1 by [@​brunoborges](https://github.com/brunoborges) in [#​1279](https://github.com/actions/setup-java/pull/1279)
- chore(deps): bump undici from 6.28.0 to 6.29.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​1274](https://github.com/actions/setup-java/pull/1274)
- chore(deps): bump the monthly-npm-updates group with 13 updates by [@​dependabot](https://github.com/dependabot)\[bot] in [#​1276](https://github.com/actions/setup-java/pull/1276)
- feat: support Maven server credential origins by [@​YunaBraska](https://github.com/YunaBraska) in [#​1282](https://github.com/actions/setup-java/pull/1282)
- Support Maven plugin repositories in generated settings.xml by [@​brunoborges](https://github.com/brunoborges) in [#​1286](https://github.com/actions/setup-java/pull/1286)
##### New Contributors
- [@​yawkat](https://github.com/yawkat) made their first contribution in [#​1269](https://github.com/actions/setup-java/pull/1269)
- [@​YunaBraska](https://github.com/YunaBraska) made their first contribution in [#​1282](https://github.com/actions/setup-java/pull/1282)
**Full Changelog**: <https://github.com/actions/setup-java/compare/v6.0.1...v6.1.0>
### [`v6.0.1`](https://github.com/actions/setup-java/releases/tag/v6.0.1)
[Compare Source](https://github.com/actions/setup-java/compare/v6.0.0...v6.0.1)
##### What's Changed
- Fix failing GitHub Actions job for temurin 17 by [@​brunoborges](https://github.com/brunoborges) with [@​Copilot](https://github.com/Copilot) in [#​1259](https://github.com/actions/setup-java/pull/1259)
- Fix Temurin EA E2E signature verification by [@​brunoborges](https://github.com/brunoborges) with [@​Copilot](https://github.com/Copilot) in [#​1260](https://github.com/actions/setup-java/pull/1260)
- Fix Alpine GPG verification failures and support multiple keys by [@​brunoborges](https://github.com/brunoborges) in [#​1262](https://github.com/actions/setup-java/pull/1262)
- Fix import-safe checks when scripts are run from a path with symlinks by [@​otaconix](https://github.com/otaconix) in [#​1265](https://github.com/actions/setup-java/pull/1265)
- Avoid macOS GPG socket overflow on long runner paths by [@​brunoborges](https://github.com/brunoborges) with [@​Copilot](https://github.com/Copilot) in [#​1266](https://github.com/actions/setup-java/pull/1266)
- Complete v6 release highlights in README by [@​brunoborges](https://github.com/brunoborges) in [#​1254](https://github.com/actions/setup-java/pull/1254)
- Group and slow routine Dependabot updates by [@​brunoborges](https://github.com/brunoborges) in [#​1255](https://github.com/actions/setup-java/pull/1255)
- chore(deps-dev): update eslint and globals by [@​dependabot](https://github.com/dependabot)\[bot] in [#​1256](https://github.com/actions/setup-java/pull/1256)
##### New Contributors
- [@​otaconix](https://github.com/otaconix) made their first contribution in [#​1265](https://github.com/actions/setup-java/pull/1265)
**Full Changelog**: <https://github.com/actions/setup-java/compare/v6.0.0...v6.0.1>
### [`v6.0.0`](https://github.com/actions/setup-java/releases/tag/v6.0.0)
[Compare Source](https://github.com/actions/setup-java/compare/v5.7.0...v6.0.0)
##### What's Changed
- dist: Migrate from Zulu Discovery API to Azul Metadata API by [@​jameswald](https://github.com/jameswald) in [#​1010](https://github.com/actions/setup-java/pull/1010)
- feat: add .mvn/extensions.xml to Maven cache key pattern by [@​brunoborges](https://github.com/brunoborges) with [@​Copilot](https://github.com/Copilot) in [#​1041](https://github.com/actions/setup-java/pull/1041)
- Migrate to ESM and upgrade dependencies by [@​priyagupta108](https://github.com/priyagupta108) in [#​1078](https://github.com/actions/setup-java/pull/1078)
- Map Zulu x86 architecture to i686 for Azul Metadata API by [@​brunoborges](https://github.com/brunoborges) in [#​1079](https://github.com/actions/setup-java/pull/1079)
- Rename jdkFile input to jdk-file with deprecated alias by [@​brunoborges](https://github.com/brunoborges) in [#​1083](https://github.com/actions/setup-java/pull/1083)
- Infer distribution from asdf .tool-versions vendor prefix by [@​brunoborges](https://github.com/brunoborges) in [#​1084](https://github.com/actions/setup-java/pull/1084)
- Add Maven compiler problem matcher for javac diagnostics by [@​brunoborges](https://github.com/brunoborges) in [#​1086](https://github.com/actions/setup-java/pull/1086)
- feat: expose cache-primary-key output ([#​597](https://github.com/actions/setup-java/issues/597)) by [@​brunoborges](https://github.com/brunoborges) in [#​1088](https://github.com/actions/setup-java/pull/1088)
- docs: clarify V6 ESM migration is not a user-facing breaking change by [@​brunoborges](https://github.com/brunoborges) in [#​1090](https://github.com/actions/setup-java/pull/1090)
- Support multi-field Java versions like `18.0.1.1` by [@​brunoborges](https://github.com/brunoborges) in [#​1092](https://github.com/actions/setup-java/pull/1092)
- docs: document seeding the Maven cache for plugin dependencies by [@​brunoborges](https://github.com/brunoborges) in [#​1094](https://github.com/actions/setup-java/pull/1094)
- docs: clarify Maven cache paths and key hash inputs by [@​brunoborges](https://github.com/brunoborges) in [#​1096](https://github.com/actions/setup-java/pull/1096)
- Support pinning java-version as "latest" by [@​brunoborges](https://github.com/brunoborges) in [#​1093](https://github.com/actions/setup-java/pull/1093)
- chore(deps-dev): bump eslint from 10.6.0 to 10.7.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​1101](https://github.com/actions/setup-java/pull/1101)
- chore(deps-dev): bump eslint-plugin-n from 18.2.1 to 18.2.2 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​1103](https://github.com/actions/setup-java/pull/1103)
- chore(deps-dev): bump prettier from 3.9.4 to 3.9.5 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​1105](https://github.com/actions/setup-java/pull/1105)
- chore(deps): bump actions/checkout from 6 to 7 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​1106](https://github.com/actions/setup-java/pull/1106)
- chore(deps-dev): bump [@​types/node](https://github.com/types/node) from 26.1.0 to 26.1.1 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​1104](https://github.com/actions/setup-java/pull/1104)
- dist: Cover Tencent Kona JDK 25 by [@​johnshajiang](https://github.com/johnshajiang) in [#​1108](https://github.com/actions/setup-java/pull/1108)
- chore(deps-dev): bump typescript from 6.0.3 to 7.0.2 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​1102](https://github.com/actions/setup-java/pull/1102)
- Preserve Maven toolchains across repeated setup-java runs ([#​1099](https://github.com/actions/setup-java/issues/1099)) by [@​brunoborges](https://github.com/brunoborges) in [#​1111](https://github.com/actions/setup-java/pull/1111)
- dist: Support Liberica NIK ([#​878](https://github.com/actions/setup-java/issues/878)) by [@​asm0dey](https://github.com/asm0dey) in [#​1112](https://github.com/actions/setup-java/pull/1112)
- Fix template injection (zizmor alert [#​118](https://github.com/actions/setup-java/issues/118)) in e2e-versions.yml by [@​brunoborges](https://github.com/brunoborges) with [@​Copilot](https://github.com/Copilot) in [#​1114](https://github.com/actions/setup-java/pull/1114)
- Fix template injection in e2e-versions.yml (zizmor alert [#​122](https://github.com/actions/setup-java/issues/122)) by [@​brunoborges](https://github.com/brunoborges) with [@​Copilot](https://github.com/Copilot) in [#​1120](https://github.com/actions/setup-java/pull/1120)
- Disable persisted checkout credentials in e2e workflow by [@​brunoborges](https://github.com/brunoborges) with [@​Copilot](https://github.com/Copilot) in [#​1115](https://github.com/actions/setup-java/pull/1115)
- feat: Update recommended configuration for GPG signing by [@​wetneb](https://github.com/wetneb) in [#​608](https://github.com/actions/setup-java/pull/608)
- Cache Maven and Gradle wrapper distributions separately from the dependency cache by [@​brunoborges](https://github.com/brunoborges) in [#​1097](https://github.com/actions/setup-java/pull/1097)
- Consolidate cache-dependency-path e2e workflow and add maven/sbt coverage by [@​brunoborges](https://github.com/brunoborges) in [#​1124](https://github.com/actions/setup-java/pull/1124)
- Use gpg.passphraseEnvName instead of the deprecated gpg.passphrase server by [@​brunoborges](https://github.com/brunoborges) in [#​1123](https://github.com/actions/setup-java/pull/1123)
- Extract repeated directory-check assertions into check-dir.sh helper by [@​brunoborges](https://github.com/brunoborges) in [#​1127](https://github.com/actions/setup-java/pull/1127)
- Consolidate duplicate jobs in e2e-versions workflow by [@​brunoborges](https://github.com/brunoborges) in [#​1125](https://github.com/actions/setup-java/pull/1125)
- Use YAML anchors to reduce boilerplate in e2e-versions workflow by [@​brunoborges](https://github.com/brunoborges) in [#​1126](https://github.com/actions/setup-java/pull/1126)
- Updated msft json for now by [@​jmjaffe37](https://github.com/jmjaffe37) in [#​1129](https://github.com/actions/setup-java/pull/1129)
- Document missing action inputs in README by [@​brunoborges](https://github.com/brunoborges) in [#​1130](https://github.com/actions/setup-java/pull/1130)
- chore(deps): bump [@​actions/cache](https://github.com/actions/cache) to 6.2.0 by [@​philip-gai](https://github.com/philip-gai) in [#​1128](https://github.com/actions/setup-java/pull/1128)
- Add an option to disable Java problem matchers by [@​brunoborges](https://github.com/brunoborges) in [#​1133](https://github.com/actions/setup-java/pull/1133)
- docs: update setup-java examples by [@​HarithaVattikuti](https://github.com/HarithaVattikuti) in [#​1131](https://github.com/actions/setup-java/pull/1131)
- Clarify credential environment variable inputs by [@​brunoborges](https://github.com/brunoborges) in [#​1134](https://github.com/actions/setup-java/pull/1134)
- chore(deps-dev): bump [@​typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/eslint-plugin) from 8.63.0 to 8.64.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​1135](https://github.com/actions/setup-java/pull/1135)
- chore(deps): bump actions/setup-python from 6 to 7 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​1143](https://github.com/actions/setup-java/pull/1143)
- chore(deps): bump fast-xml-parser from 5.9.3 to 5.10.1 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​1142](https://github.com/actions/setup-java/pull/1142)
- chore(deps-dev): bump [@​typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 8.64.0 to 8.65.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​1138](https://github.com/actions/setup-java/pull/1138)
- chore(deps-dev): bump lint-staged from 17.0.8 to 17.2.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​1136](https://github.com/actions/setup-java/pull/1136)
- chore(deps-dev): bump typescript from 6.0.3 to 7.0.2 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​1137](https://github.com/actions/setup-java/pull/1137)
- chore(deps): fix npm audited vulnerabilities by [@​mhoffrog](https://github.com/mhoffrog) in [#​1140](https://github.com/actions/setup-java/pull/1140)
- Fix formatting issues in README.md by [@​brunoborges](https://github.com/brunoborges) in [#​1144](https://github.com/actions/setup-java/pull/1144)
- Remediate npm audit findings and rebuild distributions by [@​brunoborges](https://github.com/brunoborges) with [@​Copilot](https://github.com/Copilot) in [#​1145](https://github.com/actions/setup-java/pull/1145)
- Set GRAALVM_HOME for GraalVM distributions by [@​brunoborges](https://github.com/brunoborges) with [@​Copilot](https://github.com/Copilot) in [#​1146](https://github.com/actions/setup-java/pull/1146)
- Add force-download option for reproducible JDK builds by [@​brunoborges](https://github.com/brunoborges) with [@​Copilot](https://github.com/Copilot) in [#​1148](https://github.com/actions/setup-java/pull/1148)
- Add OpenJDK distribution by [@​brunoborges](https://github.com/brunoborges) with [@​Copilot](https://github.com/Copilot) in [#​1147](https://github.com/actions/setup-java/pull/1147)
- Support Temurin JDKs with JMOD files by [@​brunoborges](https://github.com/brunoborges) with [@​Copilot](https://github.com/Copilot) in [#​1149](https://github.com/actions/setup-java/pull/1149)
- Document Java package compatibility by distribution by [@​brunoborges](https://github.com/brunoborges) in [#​1152](https://github.com/actions/setup-java/pull/1152)
- Fix caching when wrapper distributions are absent by [@​brunoborges](https://github.com/brunoborges) in [#​1151](https://github.com/actions/setup-java/pull/1151)
- Reject invalid boolean input values by [@​brunoborges](https://github.com/brunoborges) in [#​1160](https://github.com/actions/setup-java/pull/1160)
- Fail on mismatched Maven toolchain ID counts by [@​brunoborges](https://github.com/brunoborges) in [#​1161](https://github.com/actions/setup-java/pull/1161)
- Consolidate JDK metadata retry handling by [@​brunoborges](https://github.com/brunoborges) in [#​1162](https://github.com/actions/setup-java/pull/1162)
- Add direct setup orchestration tests by [@​brunoborges](https://github.com/brunoborges) in [#​1163](https://github.com/actions/setup-java/pull/1163)
- Harden java-package validation across distributions by [@​brunoborges](https://github.com/brunoborges) in [#​1165](https://github.com/actions/setup-java/pull/1165)
- Verify JDK downloads with vendor checksums by [@​brunoborges](https://github.com/brunoborges) in [#​1167](https://github.com/actions/setup-java/pull/1167)
- Reduce change-time Java E2E matrix by [@​brunoborges](https://github.com/brunoborges) in [#​1170](https://github.com/actions/setup-java/pull/1170)
- Add read-only mode for dependency caching by [@​brunoborges](https://github.com/brunoborges) in [#​1169](https://github.com/actions/setup-java/pull/1169)
- Test Temurin 25 on hosted runners by [@​brunoborges](https://github.com/brunoborges) in [#​1172](https://github.com/actions/setup-java/pull/1172)
- Restore dependency and wrapper caches concurrently by [@​brunoborges](https://github.com/brunoborges) in [#​1174](https://github.com/actions/setup-java/pull/1174)
- Add dependency cache path overrides by [@​brunoborges](https://github.com/brunoborges) in [#​1175](https://github.com/actions/setup-java/pull/1175)
- Centralize OS/architecture capability validation by [@​brunoborges](https://github.com/brunoborges) in [#​1178](https://github.com/actions/setup-java/pull/1178)
- Optimize Temurin tool-cache fast path with lazy loading by [@​brunoborges](https://github.com/brunoborges) in [#​1179](https://github.com/actions/setup-java/pull/1179)
- Optimize Maven configuration warm path by [@​brunoborges](https://github.com/brunoborges) in [#​1182](https://github.com/actions/setup-java/pull/1182)
- Fix macOS e2e workflow assertions by [@​brunoborges](https://github.com/brunoborges) in [#​1184](https://github.com/actions/setup-java/pull/1184)
- Remove legacy Adopt distributions in v6 by [@​brunoborges](https://github.com/brunoborges) with [@​Copilot](https://github.com/Copilot) in [#​1185](https://github.com/actions/setup-java/pull/1185)
- chore(deps): bump actions/upload-artifact from 6 to 7 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​1190](https://github.com/actions/setup-java/pull/1190)
- Reimagine setup-java README by [@​brunoborges](https://github.com/brunoborges) in [#​1192](https://github.com/actions/setup-java/pull/1192)
- Document deprecation of setup-java v1 through v4 by [@​brunoborges](https://github.com/brunoborges) in [#​1198](https://github.com/actions/setup-java/pull/1198)
- Update setup-java README action from v6 to v5 by [@​brunoborges](https://github.com/brunoborges) in [#​1199](https://github.com/actions/setup-java/pull/1199)
- Highlight major changes in setup-java v5 by [@​brunoborges](https://github.com/brunoborges) in [#​1200](https://github.com/actions/setup-java/pull/1200)
- Highlight major changes in setup-java v6 by [@​brunoborges](https://github.com/brunoborges) in [#​1203](https://github.com/actions/setup-java/pull/1203)
- chore(deps): bump brace-expansion from 5.0.8 to 5.0.9 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​1202](https://github.com/actions/setup-java/pull/1202)
- Add conditional JDK caching by [@​brunoborges](https://github.com/brunoborges) in [#​1201](https://github.com/actions/setup-java/pull/1201)
- docs: fix README and advanced usage inconsistencies with actual behavior by [@​brunoborges](https://github.com/brunoborges) in [#​1204](https://github.com/actions/setup-java/pull/1204)
- Move the extracted JDK into the tool-cache instead of copying it by [@​brunoborges](https://github.com/brunoborges) in [#​1206](https://github.com/actions/setup-java/pull/1206)
- docs: drop benchmark numbers from the JDK caching section by [@​brunoborges](https://github.com/brunoborges) in [#​1205](https://github.com/actions/setup-java/pull/1205)
- docs: correct the mvn-toolchain-id default in README and action.yml by [@​brunoborges](https://github.com/brunoborges) in [#​1207](https://github.com/actions/setup-java/pull/1207)
- Cache resolved JDK releases to remove the vendor API from warm jobs by [@​brunoborges](https://github.com/brunoborges) in [#​1208](https://github.com/actions/setup-java/pull/1208)
- Report concrete versions for floating Oracle JDK downloads by [@​jdubois](https://github.com/jdubois) in [#​1213](https://github.com/actions/setup-java/pull/1213)
- Import Maven signing keys into an isolated GPG home by [@​jdubois](https://github.com/jdubois) in [#​1214](https://github.com/actions/setup-java/pull/1214)
- Reuse the tool cache for floating versions the resolution cache identified by [@​brunoborges](https://github.com/brunoborges) in [#​1219](https://github.com/actions/setup-java/pull/1219)
- Fix JetBrains Runtime release pagination by [@​jdubois](https://github.com/jdubois) in [#​1218](https://github.com/actions/setup-java/pull/1218)
- Fix JDK resolution cache platform identity by [@​jdubois](https://github.com/jdubois) in [#​1210](https://github.com/actions/setup-java/pull/1210)
- fix: select musl JDK artifacts on Alpine for Dragonwell, Corretto, Zulu and Liberica by [@​brunoborges](https://github.com/brunoborges) in [#​1220](https://github.com/actions/setup-java/pull/1220)
- Fix SapMachine early-access filtering by [@​jdubois](https://github.com/jdubois) in [#​1217](https://github.com/actions/setup-java/pull/1217)
- Fix JetBrains GitHub token resolution by [@​jdubois](https://github.com/jdubois) in [#​1224](https://github.com/actions/setup-java/pull/1224)
- Include gradle.properties in Gradle cache key by [@​jdubois](https://github.com/jdubois) in [#​1225](https://github.com/actions/setup-java/pull/1225)
- Handle early dependency cache failures during Java setup by [@​jdubois](https://github.com/jdubois) in [#​1226](https://github.com/actions/setup-java/pull/1226)
- Fix js-yaml audit vulnerability by [@​brunoborges](https://github.com/brunoborges) in [#​1228](https://github.com/actions/setup-java/pull/1228)
- Fix failing GitHub Actions job for graalvm 24-ea by [@​brunoborges](https://github.com/brunoborges) with [@​Copilot](https://github.com/Copilot) in [#​1227](https://github.com/actions/setup-java/pull/1227)
- Update setup-java for Microsoft's Build of OpenJDK: now pointing task to CDN that is always up-to-date by [@​jmjaffe37](https://github.com/jmjaffe37) in [#​1236](https://github.com/actions/setup-java/pull/1236)
- chore(deps-dev): bump globals from 17.8.0 to 17.9.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​1233](https://github.com/actions/setup-java/pull/1233)
- chore(deps-dev): bump [@​types/semver](https://github.com/types/semver) from 7.7.1 to 7.8.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​1229](https://github.com/actions/setup-java/pull/1229)
- chore(deps-dev): bump lint-staged from 17.2.0 to 17.3.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​1231](https://github.com/actions/setup-java/pull/1231)
- chore(deps-dev): bump [@​typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/eslint-plugin) from 8.65.0 to 8.67.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​1232](https://github.com/actions/setup-java/pull/1232)
- Test JDK 26 installation from SDKMAN by [@​brunoborges](https://github.com/brunoborges) in [#​1238](https://github.com/actions/setup-java/pull/1238)
- Add support for multiple Maven servers by [@​brunoborges](https://github.com/brunoborges) in [#​1239](https://github.com/actions/setup-java/pull/1239)
- Add Maven dependency-resolution repositories by [@​brunoborges](https://github.com/brunoborges) in [#​1240](https://github.com/actions/setup-java/pull/1240)
- Add Red Hat Build of OpenJDK support by [@​brunoborges](https://github.com/brunoborges) in [#​1241](https://github.com/actions/setup-java/pull/1241)
- Fix Oracle macOS E2E version check by [@​brunoborges](https://github.com/brunoborges) in [#​1243](https://github.com/actions/setup-java/pull/1243)
- ci: constrain cache e2e job modes by [@​philip-gai](https://github.com/philip-gai) in [#​1244](https://github.com/actions/setup-java/pull/1244)
- Expose contributing guide to GitHub by [@​brunoborges](https://github.com/brunoborges) in [#​1245](https://github.com/actions/setup-java/pull/1245)
- Set default signature verification for supported distributions by [@​johnoliver](https://github.com/johnoliver) in [#​1246](https://github.com/actions/setup-java/pull/1246)
- chore(deps): combine open Dependabot npm updates by [@​brunoborges](https://github.com/brunoborges) in [#​1252](https://github.com/actions/setup-java/pull/1252)
- Prepare documentation for v6 release by [@​brunoborges](https://github.com/brunoborges) in [#​1253](https://github.com/actions/setup-java/pull/1253)
##### New Contributors
- [@​jameswald](https://github.com/jameswald) made their first contribution in [#​1010](https://github.com/actions/setup-java/pull/1010)
- [@​asm0dey](https://github.com/asm0dey) made their first contribution in [#​1112](https://github.com/actions/setup-java/pull/1112)
- [@​wetneb](https://github.com/wetneb) made their first contribution in [#​608](https://github.com/actions/setup-java/pull/608)
- [@​philip-gai](https://github.com/philip-gai) made their first contribution in [#​1128](https://github.com/actions/setup-java/pull/1128)
**Full Changelog**: <https://github.com/actions/setup-java/compare/v5.7.0...v6.0.0>
</details>
<details>
<summary>actions/upload-artifact</summary>
### [`v7.0.2`](https://github.com/actions/upload-artifact/releases/tag/v7.0.2)
[Compare Source](https://github.com/actions/upload-artifact/compare/v7.0.1...v7.0.2)
##### What's Changed
- Improves artifact download retries when the service returns HTTP 429 (rate limiting), including honoring valid Retry-After headers.
- Updates [@​actions/artifact](https://github.com/actions/artifact) to v6.3.1.
##### New Contributors
- [@​tunc-d](https://github.com/tunc-d) made their first contribution in [#​821](https://github.com/actions/upload-artifact/pull/821)
**Full Changelog**: <https://github.com/actions/upload-artifact/compare/v7.0.1...v7.0.2>
### [`v7.0.1`](https://github.com/actions/upload-artifact/releases/tag/v7.0.1)
[Compare Source](https://github.com/actions/upload-artifact/compare/v7.0.0...v7.0.1)
##### What's Changed
- Update the readme with direct upload details by [@​danwkennedy](https://github.com/danwkennedy) in [#​795](https://github.com/actions/upload-artifact/pull/795)
- Readme: bump all the example versions to v7 by [@​danwkennedy](https://github.com/danwkennedy) in [#​796](https://github.com/actions/upload-artifact/pull/796)
- Include changes in typespec/ts-http-runtime 0.3.5 by [@​yacaovsnc](https://github.com/yacaovsnc) in [#​797](https://github.com/actions/upload-artifact/pull/797)
**Full Changelog**: <https://github.com/actions/upload-artifact/compare/v7...v7.0.1>
### [`v7.0.0`](https://github.com/actions/upload-artifact/releases/tag/v7.0.0)
[Compare Source](https://github.com/actions/upload-artifact/compare/v6.0.0...v7.0.0)
##### v7 What's new
##### Direct Uploads
Adds support for uploading single files directly (unzipped). Callers can set the new `archive` parameter to `false` to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The `name` parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.
##### ESM
To support new versions of the `@actions/*` packages, we've upgraded the package to ESM.
##### What's Changed
- Add proxy integration test by [@​Link-](https://github.com/Link-) in [#​754](https://github.com/actions/upload-artifact/pull/754)
- Upgrade the module to ESM and bump dependencies by [@​danwkennedy](https://github.com/danwkennedy) in [#​762](https://github.com/actions/upload-artifact/pull/762)
- Support direct file uploads by [@​danwkennedy](https://github.com/danwkennedy) in [#​764](https://github.com/actions/upload-artifact/pull/764)
##### New Contributors
- [@​Link-](https://github.com/Link-) made their first contribution in [#​754](https://github.com/actions/upload-artifact/pull/754)
**Full Changelog**: <https://github.com/actions/upload-artifact/compare/v6...v7.0.0>
### [`v6.0.0`](https://github.com/actions/upload-artifact/releases/tag/v6.0.0)
[Compare Source](https://github.com/actions/upload-artifact/compare/v5.0.0...v6.0.0)
##### v6 - What's new
> \[!IMPORTANT]
> actions/upload-artifact\@​v6 now runs on Node.js 24 (`runs.using: node24`) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.
##### Node.js 24
This release updates the runtime to Node.js 24. v5 had preliminary support for Node.js 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.
##### What's Changed
- Upload Artifact Node 24 support by [@​salmanmkc](https://github.com/salmanmkc) in [#​719](https://github.com/actions/upload-artifact/pull/719)
- fix: update [@​actions/artifact](https://github.com/actions/artifact) for Node.js 24 punycode deprecation by [@​salmanmkc](https://github.com/salmanmkc) in [#​744](https://github.com/actions/upload-artifact/pull/744)
- prepare release v6.0.0 for Node.js 24 support by [@​salmanmkc](https://github.com/salmanmkc) in [#​745](https://github.com/actions/upload-artifact/pull/745)
**Full Changelog**: <https://github.com/actions/upload-artifact/compare/v5.0.0...v6.0.0>
### [`v5.0.0`](https://github.com/actions/upload-artifact/releases/tag/v5.0.0)
[Compare Source](https://github.com/actions/upload-artifact/compare/v4.6.2...v5.0.0)
##### What's Changed
**BREAKING CHANGE:** this update supports Node `v24.x`. This is not a breaking change per-se but we're treating it as such.
- Update README.md by [@​GhadimiR](https://github.com/GhadimiR) in [#​681](https://github.com/actions/upload-artifact/pull/681)
- Update README.md by [@​nebuk89](https://github.com/nebuk89) in [#​712](https://github.com/actions/upload-artifact/pull/712)
- Readme: spell out the first use of GHES by [@​danwkennedy](https://github.com/danwkennedy) in [#​727](https://github.com/actions/upload-artifact/pull/727)
- Update GHES guidance to include reference to Node 20 version by [@​patrikpolyak](https://github.com/patrikpolyak) in [#​725](https://github.com/actions/upload-artifact/pull/725)
- Bump `@actions/artifact` to `v4.0.0`
- Prepare `v5.0.0` by [@​danwkennedy](https://github.com/danwkennedy) in [#​734](https://github.com/actions/upload-artifact/pull/734)
##### New Contributors
- [@​GhadimiR](https://github.com/GhadimiR) made their first contribution in [#​681](https://github.com/actions/upload-artifact/pull/681)
- [@​nebuk89](https://github.com/nebuk89) made their first contribution in [#​712](https://github.com/actions/upload-artifact/pull/712)
- [@​danwkennedy](https://github.com/danwkennedy) made their first contribution in [#​727](https://github.com/actions/upload-artifact/pull/727)
- [@​patrikpolyak](https://github.com/patrikpolyak) made their first contribution in [#​725](https://github.com/actions/upload-artifact/pull/725)
**Full Changelog**: <https://github.com/actions/upload-artifact/compare/v4...v5.0.0>
</details>
---
### Configuration
📅 **Schedule**: (in timezone America/Toronto)
- Branch creation
- At any time (no schedule defined)
- Automerge
- At any time (no schedule defined)
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xNTEuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjE1MS4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZSJdfQ==-->
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
This PR contains the following updates:
v6→v7v4→v8v5→v6v4→v724.04→26.04Release Notes
actions/checkout
v7.0.1Compare Source
v7.0.0Compare Source
actions/download-artifact
v8.0.2Compare Source
What's Changed
New Contributors
Full Changelog: https://github.com/actions/download-artifact/compare/v8.0.1...v8.0.2
v8.0.1Compare Source
What's Changed
Full Changelog: https://github.com/actions/download-artifact/compare/v8...v8.0.1
v8.0.0Compare Source
v8 - What's new
Direct downloads
To support direct uploads in
actions/upload-artifact, the action will no longer attempt to unzip all downloaded files. Instead, the action checks theContent-Typeheader ahead of unzipping and skips non-zipped files. Callers wishing to download a zipped file as-is can also set the newskip-decompressparameter totrue.Enforced checks (breaking)
A previous release introduced digest checks on the download. If a download hash didn't match the expected hash from the server, the action would log a warning. Callers can now configure the behavior on mismatch with the
digest-mismatchparameter. To be secure by default, we are now defaulting the behavior toerrorwhich will fail the workflow run.ESM
To support new versions of the @actions/* packages, we've upgraded the package to ESM.
What's Changed
errorby @danwkennedy in #461Full Changelog: https://github.com/actions/download-artifact/compare/v7...v8.0.0
v7.0.0Compare Source
v7 - What's new
Node.js 24
This release updates the runtime to Node.js 24. v6 had preliminary support for Node 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.
What's Changed
New Contributors
Full Changelog: https://github.com/actions/download-artifact/compare/v6.0.0...v7.0.0
v6.0.0Compare Source
What's Changed
BREAKING CHANGE: this update supports Node
v24.x. This is not a breaking change per-se but we're treating it as such.@actions/artifacttov4.0.0v6.0.0by @danwkennedy in #438New Contributors
Full Changelog: https://github.com/actions/download-artifact/compare/v5...v6.0.0
v5.0.0Compare Source
What's Changed
v5.0.0
🚨 Breaking Change
This release fixes an inconsistency in path behavior for single artifact downloads by ID. If you're downloading single artifacts by ID, the output path may change.
What Changed
Previously, single artifact downloads behaved differently depending on how you specified the artifact:
name: my-artifact→ extracted topath/(direct)artifact-ids: 12345→ extracted topath/my-artifact/(nested)Now both methods are consistent:
name: my-artifact→ extracted topath/(unchanged)artifact-ids: 12345→ extracted topath/(fixed - now direct)Migration Guide
✅ No Action Needed If:
merge-multiple: trueas a workaround⚠️ Action Required If:
You download single artifacts by ID and your workflows expect the nested directory structure.
Before v5 (nested structure):
To maintain old behavior (if needed):
New Contributors
Full Changelog: https://github.com/actions/download-artifact/compare/v4...v5.0.0
actions/setup-java
v6.1.0Compare Source
What's Changed
New Contributors
Full Changelog: https://github.com/actions/setup-java/compare/v6.0.1...v6.1.0
v6.0.1Compare Source
What's Changed
New Contributors
Full Changelog: https://github.com/actions/setup-java/compare/v6.0.0...v6.0.1
v6.0.0Compare Source
What's Changed
18.0.1.1by @brunoborges in #1092New Contributors
Full Changelog: https://github.com/actions/setup-java/compare/v5.7.0...v6.0.0
actions/upload-artifact
v7.0.2Compare Source
What's Changed
New Contributors
Full Changelog: https://github.com/actions/upload-artifact/compare/v7.0.1...v7.0.2
v7.0.1Compare Source
What's Changed
Full Changelog: https://github.com/actions/upload-artifact/compare/v7...v7.0.1
v7.0.0Compare Source
v7 What's new
Direct Uploads
Adds support for uploading single files directly (unzipped). Callers can set the new
archiveparameter tofalseto skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. Thenameparameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.ESM
To support new versions of the
@actions/*packages, we've upgraded the package to ESM.What's Changed
New Contributors
Full Changelog: https://github.com/actions/upload-artifact/compare/v6...v7.0.0
v6.0.0Compare Source
v6 - What's new
Node.js 24
This release updates the runtime to Node.js 24. v5 had preliminary support for Node.js 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.
What's Changed
Full Changelog: https://github.com/actions/upload-artifact/compare/v5.0.0...v6.0.0
v5.0.0Compare Source
What's Changed
BREAKING CHANGE: this update supports Node
v24.x. This is not a breaking change per-se but we're treating it as such.@actions/artifacttov4.0.0v5.0.0by @danwkennedy in #734New Contributors
Full Changelog: https://github.com/actions/upload-artifact/compare/v4...v5.0.0
Configuration
📅 Schedule: (in timezone America/Toronto)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR has been generated by Mend Renovate CLI.
View command line instructions
Checkout
From your project repository, check out a new branch and test the changes.