Screeps/screeps-deploy-action
4
1
Fork 0
Code Issues 1 Pull Requests 3 Actions Packages Releases 4 Activity

fix(deps): update dependency @actions/artifact to v6 #125

Closed
Renovate wants to merge 1 commits from renovate/actions-artifact-6.x into main
pull from: renovate/actions-artifact-6.x
merge into: :main
Conversation 2 Commits 1 Files Changed 2
+1223 -53
Renovate commented 2026-09-04 23:24:52 +02:00
Member
Copy Link
Copy Source

This PR contains the following updates:

Package Change Age Confidence
@actions/artifact (source) ^1.1.2 → ^6.0.0 age confidence

Release Notes

actions/toolkit (@​actions/artifact)

v6.2.1

  • Support the RFC 5987 filename* field in the content-disposition header. This allows us to correctly download files and artifacts with Chinese/Japanese/Korean (among other) characters in their name.

v6.2.0

  • Support uploading single un-archived files (not zipped). Direct uploads are only supported for artifacts version 7+ (based on the major version of actions/upload-artifact). Callers must pass the skipArchive option to uploadArtifact. Only single files can be uploaded at a time right now. Default behavior should remain unchanged if skipArchive = false. When skipArchive = true, the name of the file is used as the name of the artifact for consistency with the downloads: you upload artifact.txt, you download artifact.txt.

v6.1.0

  • Support downloading non-zip artifacts. Zipped artifacts will be decompressed automatically (with an optional override). Un-zipped artifacts will be downloaded as-is.

v6.0.0

  • Breaking change: Package is now ESM-only
    • CommonJS consumers must use dynamic import() instead of require()

v5.0.3

  • Bump @actions/http-client to 3.0.2

v5.0.1

  • Fix Node.js 24 punycode deprecation warning by updating @azure/storage-blob from ^12.15.0 to ^12.29.1 #​2211
  • Removed direct @azure/core-http dependency (now uses @azure/core-rest-pipeline via storage-blob)

v5.0.0

  • Dependency updates for Node.js 24 runtime support
  • Update @actions/core to v2
  • Update @actions/http-client to v3

v4.0.0

  • Add support for Node 24 #​2110
  • Fix: artifact pagination bugs and configurable artifact count limits #​2165
  • Fix: reject the promise on timeout #​2124
  • Update dependency versions

v2.3.2

  • Added masking for Shared Access Signature (SAS) artifact URLs #​1982
  • Change hash to digest for consistent terminology across runner logs #​1991

v2.3.1

  • Fix comment typo on expectedHash. #​1986

v2.3.0

  • Allow ArtifactClient to perform digest comparisons, if supplied. #​1975

v2.2.2

  • Default concurrency to 5 for uploading artifacts #​1962

v2.2.1

  • Add ACTIONS_ARTIFACT_UPLOAD_CONCURRENCY and ACTIONS_ARTIFACT_UPLOAD_TIMEOUT_MS environment variables #​1928

v2.2.0

  • Return artifact digest on upload #​1896

v2.1.11

  • Fixed a bug with relative symlinks resolution #​1844
  • Use native crypto #​1815

v2.1.10

  • Fixed a regression with symlinks not being automatically resolved #​1830
  • Fixed a regression with chunk timeout #​1786

v2.1.9

  • Fixed artifact upload chunk timeout logic #​1774
  • Use lazy stream to prevent issues with open file limits #​1771

v2.1.8

  • Allows *.localhost domains for hostname checks for local development.

v2.1.7

  • Update unzip-stream dependency and reverted to using unzip.Extract()

v2.1.6

  • Will retry on invalid request responses.

v2.1.5

  • Bumped archiver dependency to 7.0.1

v2.1.4

  • Adds info-level logging for zip extraction

v2.1.3

  • Fixes a bug in the extract logic updated in 2.1.2

v2.1.2

  • Updated the stream extract functionality to use unzip.Parse() instead of unzip.Extract() for greater control of unzipping artifacts

v2.1.1

  • Fixed a bug with relative symlinks resolution #​1844
  • Use native crypto #​1815

v2.1.0

  • Added ArtifactClient#deleteArtifact to delete artifacts by name #​1626
  • Update error messaging to be more useful #​1628

v2.0.1

v2.0.0

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • "on monday,on friday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [@actions/artifact](https://github.com/actions/toolkit/tree/main/packages/artifact) ([source](https://github.com/actions/toolkit/tree/HEAD/packages/artifact)) | [`^1.1.2` → `^6.0.0`](https://renovatebot.com/diffs/npm/@actions%2fartifact/1.1.3/6.2.1) | ![age](https://developer.mend.io/api/mc/badges/age/npm/@actions%2fartifact/6.2.1?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@actions%2fartifact/1.1.3/6.2.1?slim=true) | --- ### Release Notes <details> <summary>actions/toolkit (@&#8203;actions/artifact)</summary> ### [`v6.2.1`](https://github.com/actions/toolkit/blob/HEAD/packages/artifact/RELEASES.md#621) - Support the RFC 5987 `filename*` field in the `content-disposition` header. This allows us to correctly download files and artifacts with Chinese/Japanese/Korean (among other) characters in their name. ### [`v6.2.0`](https://github.com/actions/toolkit/blob/HEAD/packages/artifact/RELEASES.md#620) - Support uploading single un-archived files (not zipped). Direct uploads are only supported for artifacts version 7+ (based on the major version of `actions/upload-artifact`). Callers must pass the `skipArchive` option to `uploadArtifact`. Only single files can be uploaded at a time right now. Default behavior should remain unchanged if `skipArchive = false`. When `skipArchive = true`, the name of the file is used as the name of the artifact for consistency with the downloads: you upload `artifact.txt`, you download `artifact.txt`. ### [`v6.1.0`](https://github.com/actions/toolkit/blob/HEAD/packages/artifact/RELEASES.md#610) - Support downloading non-zip artifacts. Zipped artifacts will be decompressed automatically (with an optional override). Un-zipped artifacts will be downloaded as-is. ### [`v6.0.0`](https://github.com/actions/toolkit/blob/HEAD/packages/artifact/RELEASES.md#600) - **Breaking change**: Package is now ESM-only - CommonJS consumers must use dynamic `import()` instead of `require()` ### [`v5.0.3`](https://github.com/actions/toolkit/blob/HEAD/packages/artifact/RELEASES.md#503) - Bump `@actions/http-client` to `3.0.2` ### [`v5.0.1`](https://github.com/actions/toolkit/blob/HEAD/packages/artifact/RELEASES.md#501) - Fix Node.js 24 punycode deprecation warning by updating `@azure/storage-blob` from `^12.15.0` to `^12.29.1` [#&#8203;2211](https://github.com/actions/toolkit/pull/2211) - Removed direct `@azure/core-http` dependency (now uses `@azure/core-rest-pipeline` via storage-blob) ### [`v5.0.0`](https://github.com/actions/toolkit/blob/HEAD/packages/artifact/RELEASES.md#500) - Dependency updates for Node.js 24 runtime support - Update `@actions/core` to v2 - Update `@actions/http-client` to v3 ### [`v4.0.0`](https://github.com/actions/toolkit/blob/HEAD/packages/artifact/RELEASES.md#400) - Add support for Node 24 [#&#8203;2110](https://github.com/actions/toolkit/pull/2110) - Fix: artifact pagination bugs and configurable artifact count limits [#&#8203;2165](https://github.com/actions/toolkit/pull/2165) - Fix: reject the promise on timeout [#&#8203;2124](https://github.com/actions/toolkit/pull/2124) - Update dependency versions ### [`v2.3.2`](https://github.com/actions/toolkit/blob/HEAD/packages/artifact/RELEASES.md#232) - Added masking for Shared Access Signature (SAS) artifact URLs [#&#8203;1982](https://github.com/actions/toolkit/pull/1982) - Change hash to digest for consistent terminology across runner logs [#&#8203;1991](https://github.com/actions/toolkit/pull/1991) ### [`v2.3.1`](https://github.com/actions/toolkit/blob/HEAD/packages/artifact/RELEASES.md#231) - Fix comment typo on expectedHash. [#&#8203;1986](https://github.com/actions/toolkit/pull/1986) ### [`v2.3.0`](https://github.com/actions/toolkit/blob/HEAD/packages/artifact/RELEASES.md#230) - Allow ArtifactClient to perform digest comparisons, if supplied. [#&#8203;1975](https://github.com/actions/toolkit/pull/1975) ### [`v2.2.2`](https://github.com/actions/toolkit/blob/HEAD/packages/artifact/RELEASES.md#222) - Default concurrency to 5 for uploading artifacts [#&#8203;1962](https://github.com/actions/toolkit/pull/1962) ### [`v2.2.1`](https://github.com/actions/toolkit/blob/HEAD/packages/artifact/RELEASES.md#221) - Add `ACTIONS_ARTIFACT_UPLOAD_CONCURRENCY` and `ACTIONS_ARTIFACT_UPLOAD_TIMEOUT_MS` environment variables [#&#8203;1928](https://github.com/actions/toolkit/pull/1928) ### [`v2.2.0`](https://github.com/actions/toolkit/blob/HEAD/packages/artifact/RELEASES.md#220) - Return artifact digest on upload [#&#8203;1896](https://github.com/actions/toolkit/pull/1896) ### [`v2.1.11`](https://github.com/actions/toolkit/blob/HEAD/packages/artifact/RELEASES.md#2111) - Fixed a bug with relative symlinks resolution [#&#8203;1844](https://github.com/actions/toolkit/pull/1844) - Use native `crypto` [#&#8203;1815](https://github.com/actions/toolkit/pull/1815) ### [`v2.1.10`](https://github.com/actions/toolkit/blob/HEAD/packages/artifact/RELEASES.md#2110) - Fixed a regression with symlinks not being automatically resolved [#&#8203;1830](https://github.com/actions/toolkit/pull/1830) - Fixed a regression with chunk timeout [#&#8203;1786](https://github.com/actions/toolkit/pull/1786) ### [`v2.1.9`](https://github.com/actions/toolkit/blob/HEAD/packages/artifact/RELEASES.md#219) - Fixed artifact upload chunk timeout logic [#&#8203;1774](https://github.com/actions/toolkit/pull/1774) - Use lazy stream to prevent issues with open file limits [#&#8203;1771](https://github.com/actions/toolkit/pull/1771) ### [`v2.1.8`](https://github.com/actions/toolkit/blob/HEAD/packages/artifact/RELEASES.md#218) - Allows `*.localhost` domains for hostname checks for local development. ### [`v2.1.7`](https://github.com/actions/toolkit/blob/HEAD/packages/artifact/RELEASES.md#217) - Update unzip-stream dependency and reverted to using `unzip.Extract()` ### [`v2.1.6`](https://github.com/actions/toolkit/blob/HEAD/packages/artifact/RELEASES.md#216) - Will retry on invalid request responses. ### [`v2.1.5`](https://github.com/actions/toolkit/blob/HEAD/packages/artifact/RELEASES.md#215) - Bumped `archiver` dependency to 7.0.1 ### [`v2.1.4`](https://github.com/actions/toolkit/blob/HEAD/packages/artifact/RELEASES.md#214) - Adds info-level logging for zip extraction ### [`v2.1.3`](https://github.com/actions/toolkit/blob/HEAD/packages/artifact/RELEASES.md#213) - Fixes a bug in the extract logic updated in 2.1.2 ### [`v2.1.2`](https://github.com/actions/toolkit/blob/HEAD/packages/artifact/RELEASES.md#212) - Updated the stream extract functionality to use `unzip.Parse()` instead of `unzip.Extract()` for greater control of unzipping artifacts ### [`v2.1.1`](https://github.com/actions/toolkit/blob/HEAD/packages/artifact/RELEASES.md#2111) - Fixed a bug with relative symlinks resolution [#&#8203;1844](https://github.com/actions/toolkit/pull/1844) - Use native `crypto` [#&#8203;1815](https://github.com/actions/toolkit/pull/1815) ### [`v2.1.0`](https://github.com/actions/toolkit/blob/HEAD/packages/artifact/RELEASES.md#210) - Added `ArtifactClient#deleteArtifact` to delete artifacts by name [#&#8203;1626](https://github.com/actions/toolkit/pull/1626) - Update error messaging to be more useful [#&#8203;1628](https://github.com/actions/toolkit/pull/1628) ### [`v2.0.1`](https://github.com/actions/toolkit/blob/HEAD/packages/artifact/RELEASES.md#201) - Patch to fix transient request timeouts [actions/download-artifact#249](https://github.com/actions/download-artifact/issues/249) ### [`v2.0.0`](https://github.com/actions/toolkit/blob/HEAD/packages/artifact/RELEASES.md#200) - Major release. Supports new Artifact backend for improved speed, reliability and behavior. - Numerous API changes, [some breaking](./README.md#breaking-changes). - [Blog post with more info](https://github.blog/2024-02-12-get-started-with-v4-of-github-actions-artifacts/) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - "on monday,on friday" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC41NS4wIiwidXBkYXRlZEluVmVyIjoiNDQuNTUuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiYXV0b21hdGlvbiIsIm5wbSJdfQ==-->
Renovate added 1 commit 2026-09-04 23:24:53 +02:00
fix(deps): update dependency @actions/artifact to v6
renovate/stability-days Updates have met minimum release age requirement
Details
Recompile dist/ on Renovate PR / recompile (pull_request) Failing after 0s
Details
Test / Run Tests (push) Failing after 0s
Details
Test / Run Tests (pull_request) Failing after 0s
Details
Philipp/Global-Workflows: Pre-commit Lint (Scoped) / pre-commit (pull_request) Failing after 1s
Details
478ff2cbe0
CODEOWNERS rules requested review from AutoReview 2026-09-04 23:24:53 +02:00
AutoReview approved these changes 2026-09-04 23:24:59 +02:00
AutoReview left a comment
Member
Copy Link
Copy Source

Summary

  • Critical: None. The update to @actions/artifact v6 is standard, and while it introduces a larger transitive dependency tree (e.g., @azure/storage-blob), this is expected for v6 which moved away from its own storage implementation.
  • Testing: None required; this is a dependency update.
  • Improvement: None.
  • Nitpick: None.

The update was verified by inspecting the dependency tree changes in pnpm-lock.yaml and ensuring package.json reflects the new major version. The changes appear safe and necessary for modern GitHub Actions compatibility.

**Summary** * **Critical:** None. The update to `@actions/artifact` v6 is standard, and while it introduces a larger transitive dependency tree (e.g., `@azure/storage-blob`), this is expected for v6 which moved away from its own storage implementation. * **Testing:** None required; this is a dependency update. * **Improvement:** None. * **Nitpick:** None. The update was verified by inspecting the dependency tree changes in `pnpm-lock.yaml` and ensuring `package.json` reflects the new major version. The changes appear safe and necessary for modern GitHub Actions compatibility.
Philipp closed this pull request 2026-09-04 23:47:25 +02:00
Renovate commented 2026-09-04 23:51:52 +02:00
Author
Member
Copy Link
Copy Source

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update. You will not get PRs for any future 6.x releases. But if you manually upgrade to 6.x then Renovate will re-enable minor and patch updates automatically.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.

### Renovate Ignore Notification Because you closed this PR without merging, Renovate will ignore this update. You will not get PRs for *any* future `6.x` releases. But if you manually upgrade to `6.x` then Renovate will re-enable `minor` and `patch` updates automatically. If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.

Pull request closed

This pull request cannot be reopened because the branch was deleted.
Sign in to join this conversation.
Reviewers
No Reviewers
AutoReview
Labels
Clear labels
bug
Something is not working
 chore
duplicate
This issue or pull request already exists
 enhancement
New feature
 help wanted
Need some help
 invalid
Something is wrong
 question
More information is needed
 wontfix
This won't be fixed
No labels
Milestone
No items
No Milestone
Assignees
Clear assignees
AutoReview (LLMReview) Philipp (Philipp Horstenkamp) Renovate (Renovate Bot) runner (Act Runner)
No Assignees
2 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: Screeps/screeps-deploy-action#125