Skip to content

chore(deps): bump actions/download-artifact from 8.0.1 to 8.0.2 - #215

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions/download-artifact-8.0.2
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions/download-artifact-8.0.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 14, 2026 •

Copy link
Copy Markdown

Bumps actions/download-artifact from 8.0.1 to 8.0.2.

Release notes

Sourced from actions/download-artifact's releases.

v8.0.2

What's Changed

New Contributors

Full Changelog: actions/download-artifact@v8.0.1...v8.0.2

Commits
  • 9000827 Merge pull request #493 from actions/tunc-d-prepare-download-v8-0-2
  • e455989 Prepare download-artifact v8.0.2
  • a00b90c Merge pull request #492 from actions/tunc-d-download-artifact-package-bump
  • 29bb7ce Update @​actions/artifact to 6.3.1
  • 484a0b5 Update the readme (#473)
  • See full diff in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Oct 14, 2026
@coderabbitai

coderabbitai Bot commented Oct 14, 2026 •

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration
  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: Organization UI
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 22d9b415-c826-426f-85fd-0d1f6c923e4b

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

@github-actions

github-actions Bot commented Oct 14, 2026 •

Copy link
Copy Markdown

FactoryLine Proof Review

Commit: 1b599320143ec25d1af6ad3e4fc07469fc7e2986
Diff-to-Proof Review SHA-256: 19cde8074f9afc2c5f07c711f988a88593f158c913913d25d8be0cf9afa1af26
Proof Review SHA-256: 9c74c81ba57c890ff9437ed1cfe232ad748808865ce65ea0950a464f039b1ac5

Changed-scope walkthrough

  • Delivery — .github/workflows/factory-proof.yml, .github/workflows/intellij-plugin.yml, .github/workflows/jetbrains-marketplace.yml, .github/workflows/openvsx.yml, .github/workflows/publish.yml, .github/workflows/signed-receipts.yml, .github/workflows/vscode-marketplace.yml

Fact-derived next action

  • bind_changed_path_to_proof — This changed path has no explicit Graph Ops proof-input edge.

Findings

  • blocking unmatched_changed_path — This changed path has no explicit Graph Ops proof-input edge.

Unproven claims

  • No explicit proof-input edge is declared for .github/workflows/factory-proof.yml.
  • No explicit proof-input edge is declared for .github/workflows/intellij-plugin.yml.
  • No explicit proof-input edge is declared for .github/workflows/jetbrains-marketplace.yml.
  • No explicit proof-input edge is declared for .github/workflows/openvsx.yml.
  • No explicit proof-input edge is declared for .github/workflows/publish.yml.
  • No explicit proof-input edge is declared for .github/workflows/signed-receipts.yml.
  • No explicit proof-input edge is declared for .github/workflows/vscode-marketplace.yml.
  • Pattern and guard-path audit state: not_configured; no runtime correctness or release approval is implied.

Authority boundary

Advisory only. This payload has no execution, approval, publication, deployment, signing, messaging, credential, connector, source write, test execution, repair authority. It does not use CodeRabbit credentials, interpret AI comments as proof, approve, merge, or modify source.

Existing Diff-to-Proof map

flowchart LR
  REVIEW["Diff-to-Proof Review"]
  C1["Changed: .github/workflows/factory-proof.yml"]
  C1 --> REVIEW
  C2["Changed: .github/workflows/intellij-plugin.yml"]
  C2 --> REVIEW
  C3["Changed: .github/workflows/jetbrains-marketplace.yml"]
  C3 --> REVIEW
  C4["Changed: .github/workflows/openvsx.yml"]
  C4 --> REVIEW
  C5["Changed: .github/workflows/publish.yml"]
  C5 --> REVIEW
  C6["Changed: .github/workflows/signed-receipts.yml"]
  C6 --> REVIEW
  C7["Changed: .github/workflows/vscode-marketplace.yml"]
  C7 --> REVIEW
  U1["Unmatched: .github/workflows/factory-proof.yml"]
  REVIEW --> U1
  U2["Unmatched: .github/workflows/intellij-plugin.yml"]
  REVIEW --> U2
  U3["Unmatched: .github/workflows/jetbrains-marketplace.yml"]
  REVIEW --> U3
  U4["Unmatched: .github/workflows/openvsx.yml"]
  REVIEW --> U4
  U5["Unmatched: .github/workflows/publish.yml"]
  REVIEW --> U5
  U6["Unmatched: .github/workflows/signed-receipts.yml"]
  REVIEW --> U6
  U7["Unmatched: .github/workflows/vscode-marketplace.yml"]
  REVIEW --> U7
  F1["unmatched_changed_path"]
  REVIEW --> F1
Loading

@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions/download-artifact-8.0.2 branch 3 times, most recently from fad6dd9 to 740e70b Compare October 16, 2026 04:30
@dependabot dependabot Bot changed the title chore(deps): bump actions/download-artifact from 8.0.1 to 8.0.2 build(deps): bump actions/download-artifact from 8.0.1 to 8.0.2 Oct 23, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions/download-artifact-8.0.2 branch from 740e70b to 7738b5e Compare October 23, 2026 04:02
@dependabot dependabot Bot changed the title build(deps): bump actions/download-artifact from 8.0.1 to 8.0.2 chore(deps): bump actions/download-artifact from 8.0.1 to 8.0.2 Oct 27, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions/download-artifact-8.0.2 branch from 7738b5e to 4bb1201 Compare October 27, 2026 03:42
@dependabot dependabot Bot changed the title chore(deps): bump actions/download-artifact from 8.0.1 to 8.0.2 build(deps): bump actions/download-artifact from 8.0.1 to 8.0.2 Oct 28, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions/download-artifact-8.0.2 branch 3 times, most recently from c028404 to 2bc222b Compare October 31, 2026 03:34
@dependabot dependabot Bot changed the title build(deps): bump actions/download-artifact from 8.0.1 to 8.0.2 chore(deps): bump actions/download-artifact from 8.0.1 to 8.0.2 Oct 31, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions/download-artifact-8.0.2 branch 4 times, most recently from 012fe93 to 393c05b Compare November 2, 2026 15:27
Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 8.0.1 to 8.0.2.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@3e5f45b...9000827)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: 8.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions/download-artifact-8.0.2 branch from 393c05b to 1b59932 Compare November 4, 2026 05:37

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants