Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 29, 2025

Bumps dawidd6/action-download-artifact from 11 to 12.

Release notes

Sourced from dawidd6/action-download-artifact's releases.

v12

What's Changed

Full Changelog: dawidd6/action-download-artifact@v11...v12

Commits
  • 0bd50d5 node_modules: update (#347)
  • c530ff8 Update commit and ref to use pull request SHA
  • a275236 Update dependencies in package.json
  • 74a19a2 Downgrade @​actions/core dependency version
  • d3cbd7e Change npm command from ci to install
  • 18697ba Update @​actions/artifact version in package.json
  • e369143 build(deps): bump peter-evans/create-pull-request from 7 to 8 (#344)
  • 7157953 Rename update workflow to npm-updates
  • c648dad node_modules: update (#343)
  • 7b0cd8f Change concurrency group from 'test' to 'upload'
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Dec 29, 2025
Bumps [dawidd6/action-download-artifact](https://github.com/dawidd6/action-download-artifact) from 11 to 12.
- [Release notes](https://github.com/dawidd6/action-download-artifact/releases)
- [Commits](dawidd6/action-download-artifact@v11...v12)

---
updated-dependencies:
- dependency-name: dawidd6/action-download-artifact
  dependency-version: '12'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@gtema gtema force-pushed the dependabot/github_actions/dawidd6/action-download-artifact-12 branch from 2d37762 to bfce247 Compare December 30, 2025 08:55

- name: Download Benchmark Results
uses: dawidd6/action-download-artifact@v11
uses: dawidd6/action-download-artifact@v12

Check warning

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium

Unpinned 3rd party Action 'Benchmarks' step
Uses Step
uses 'dawidd6/action-download-artifact' with ref 'v12', not a pinned commit hash

- name: Download PR Event
uses: dawidd6/action-download-artifact@v11
uses: dawidd6/action-download-artifact@v12

Check warning

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium

Unpinned 3rd party Action 'Benchmarks' step
Uses Step
uses 'dawidd6/action-download-artifact' with ref 'v12', not a pinned commit hash
@github-actions
Copy link

🐰 Bencher Report

Branchdependabot/github_actions/dawidd6/action-download-artifact-12
Testbedubuntu-latest
Click to view all benchmark results
BenchmarkLatencyBenchmark Result
nanoseconds (ns)
(Result Δ%)
Upper Boundary
nanoseconds (ns)
(Limit %)
fernet token/project📈 view plot
🚷 view threshold
1,405.80 ns
(-3.03%)Baseline: 1,449.72 ns
1,642.54 ns
(85.59%)
get_fernet_token_timestamp/project📈 view plot
🚷 view threshold
151.53 ns
(-1.03%)Baseline: 153.10 ns
190.66 ns
(79.48%)
🐰 View full continuous benchmarking report in Bencher

@gtema gtema merged commit c92f617 into main Dec 30, 2025
18 of 19 checks passed
@dependabot dependabot bot deleted the dependabot/github_actions/dawidd6/action-download-artifact-12 branch December 30, 2025 09:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants