chore(deps): bump actions/download-artifact from 7 to 8

[dependabot]

Bumps actions/download-artifact from 7 to 8.

Release notes

Sourced from actions/download-artifact's releases.

v8.0.0

v8 - What's new

[!IMPORTANT] actions/download-artifact@v8 has been migrated to an ESM module. This should be transparent to the caller but forks might need to make significant changes.

[!IMPORTANT] Hash mismatches will now error by default. Users can override this behavior with a setting change (see below).

Direct downloads

To support direct uploads in actions/upload-artifact, the action will no longer attempt to unzip all downloaded files. Instead, the action checks the Content-Type header ahead of unzipping and skips non-zipped files. Callers wishing to download a zipped file as-is can also set the new skip-decompress parameter to true.

Enforced checks (breaking)

A previous release introduced digest checks on the download. If a download hash didn't match the expected hash from the server, the action would log a warning. Callers can now configure the behavior on mismatch with the digest-mismatch parameter. To be secure by default, we are now defaulting the behavior to error which will fail the workflow run.

ESM

To support new versions of the @actions/* packages, we've upgraded the package to ESM.

What's Changed

• Don't attempt to un-zip non-zipped downloads by @​danwkennedy in actions/download-artifact#460
• Add a setting to specify what to do on hash mismatch and default it to error by @​danwkennedy in actions/download-artifact#461

Full Changelog: actions/download-artifact@v7...v8.0.0

Commits

• 3e5f45b Add regression tests for CJK characters (#471)
• e6d03f6 Add a regression test for artifact name + content-type mismatches (#472)
• 70fc10c Merge pull request #461 from actions/danwkennedy/digest-mismatch-behavior
• f258da9 Add change docs
• ccc058e Fix linting issues
• bd7976b Add a setting to specify what to do on hash mismatch and default it to error
• ac21fcf Merge pull request #460 from actions/danwkennedy/download-no-unzip
• 15999bf Add note about package bumps
• 974686e Bump the version to v8 and add release notes
• fbe48b1 Update test names to make it clearer what they do
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

Standing release PR: #400 · 17 packages queued · open 6h 37m · ✅ ready to merge

Release Preview — 14 packages

Note: Labels on this PR are advisory in standing-pr mode. Bumps come from conventional commits in the standing PR; override by editing labels on the standing PR itself. Add release:immediate to bypass the standing PR and release this PR directly.

These changes will be added to the release PR (#400) when merged:

Changelog

Project-wide changes

Changed

• bump actions/download-artifact from 7 to 8 (deps)

@wdio/electrobun-service v0.1.0-next.0 → 0.1.1

Changed

• Update version to 0.1.1

@wdio/electron-cdp-bridge wdio-electron-cdp-bridge@v10.0.0 → 10.0.1

Changed

• Update version to 10.0.1

@wdio/electron-service wdio-electron-service@v10.0.0 → 10.0.1

Changed

• Update version to 10.0.1

@wdio/flutter-service v1.0.0-next.0 → 1.0.1

Changed

• Update version to 1.0.1

@wdio/native-cdp-bridge v0.1.0-next.0 → 0.1.1

Changed

• Update version to 0.1.1

@wdio/native-mobile-core v1.0.0 → 1.0.1

Changed

• Update version to 1.0.1

@wdio/native-spy wdio-native-spy@v1.1.0 → 1.1.1

Changed

• Update version to 1.1.1

@wdio/native-types wdio-native-types@v2.3.1 → 2.3.2

Changed

• Update version to 2.3.2

@wdio/native-utils wdio-native-utils@v2.4.0 → 2.4.1

Changed

• Update version to 2.4.1

@wdio/react-native-service v1.0.0-next.0 → 1.0.1

Changed

• Update version to 1.0.1

dioxus-package-test-app v0.1.0 → 0.1.1

Changed

• Update version to 0.1.1

wdio-dioxus-embedded-driver v1.0.0-rc.0 → 1.0.1

Changed

• Update version to 1.0.1

wdio_flutter_fixture N/A → 0.1.1

Changed

• Update version to 0.1.1

wdio_flutter N/A → 0.1.1

Changed

• Update version to 0.1.1

After merge — predicted release

No version escalation — this PR's changes will be included in the queued release without affecting the projected versions.

Package	Standing PR	This PR	After merge
@wdio/dioxus-bridge	1.1.0	—	1.1.0
@wdio/dioxus-service	1.1.0	—	1.1.0
@wdio/electrobun-service	0.2.0	0.1.1	0.2.0
@wdio/electron-cdp-bridge	10.1.0	10.0.1	10.1.0
@wdio/electron-service	10.1.0	10.0.1	10.1.0
@wdio/flutter-service	1.1.0	1.0.1	1.1.0
@wdio/native-cdp-bridge	0.2.0	0.1.1	0.2.0
@wdio/native-mobile-core	1.1.0	1.0.1	1.1.0
@wdio/native-spy	1.2.0	1.1.1	1.2.0
@wdio/native-types	2.4.0	2.3.2	2.4.0
@wdio/native-utils	2.5.0	2.4.1	2.5.0
@wdio/react-native-service	1.1.0	1.0.1	1.1.0
dioxus-package-test-app	0.2.0	0.1.1	0.2.0
wdio_flutter	0.2.0	0.1.1	0.2.0
wdio_flutter_fixture	0.2.0	0.1.1	0.2.0
wdio-dioxus-driver	1.1.0	—	1.1.0
wdio-dioxus-embedded-driver	1.1.0	1.0.1	1.1.0

---

Updated automatically by ReleaseKit