chore(deps): update github actions (major) by renovate[bot] · Pull Request #1612 · voidzero-dev/vite-plus

renovate · 2026-05-17T16:36:18Z

This PR contains the following updates:

Package	Type	Update	Change
actions/download-artifact	action	major	`v4.3.0` → `v8.0.1`
node	container	major	`22-alpine3.21` → `25-alpine3.21`
pnpm/action-setup	action	major	`v5.0.0` → `v6.0.8`
pnpm/action-setup	action	major	`v4.4.0` → `v6.0.8`

Release Notes

actions/download-artifact (actions/download-artifact)

`v8.0.1`

Compare Source

What's Changed

Support for CJK characters in the artifact name by @danwkennedy in #471
Add a regression test for artifact name + content-type mismatches by @danwkennedy in #472

Full Changelog: actions/download-artifact@v8...v8.0.1

`v8.0.0`

Compare Source

v8 - What's new

Direct downloads

To support direct uploads in actions/upload-artifact, the action will no longer attempt to unzip all downloaded files. Instead, the action checks the Content-Type header ahead of unzipping and skips non-zipped files. Callers wishing to download a zipped file as-is can also set the new skip-decompress parameter to false.

Enforced checks (breaking)

A previous release introduced digest checks on the download. If a download hash didn't match the expected hash from the server, the action would log a warning. Callers can now configure the behavior on mismatch with the digest-mismatch parameter. To be secure by default, we are now defaulting the behavior to error which will fail the workflow run.

ESM

To support new versions of the @actions/* packages, we've upgraded the package to ESM.

What's Changed

Don't attempt to un-zip non-zipped downloads by @danwkennedy in #460
Add a setting to specify what to do on hash mismatch and default it to error by @danwkennedy in #461

Full Changelog: actions/download-artifact@v7...v8.0.0

`v7.0.0`

Compare Source

v7 - What's new

[!IMPORTANT]
actions/download-artifact@v7 now runs on Node.js 24 (runs.using: node24) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.

Node.js 24

This release updates the runtime to Node.js 24. v6 had preliminary support for Node 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.

What's Changed

Update GHES guidance to include reference to Node 20 version by @patrikpolyak in #440
Download Artifact Node24 support by @salmanmkc in #415
fix: update @actions/artifact to fix Node.js 24 punycode deprecation by @salmanmkc in #451
prepare release v7.0.0 for Node.js 24 support by @salmanmkc in #452

New Contributors

@patrikpolyak made their first contribution in #440
@salmanmkc made their first contribution in #415

Full Changelog: actions/download-artifact@v6.0.0...v7.0.0

`v6.0.0`

Compare Source

What's Changed

BREAKING CHANGE: this update supports Node v24.x. This is not a breaking change per-se but we're treating it as such.

Update README for download-artifact v5 changes by @yacaovsnc in #417
Update README with artifact extraction details by @yacaovsnc in #424
Readme: spell out the first use of GHES by @danwkennedy in #431
Bump @actions/artifact to v4.0.0
Prepare v6.0.0 by @danwkennedy in #438

New Contributors

@danwkennedy made their first contribution in #431

Full Changelog: actions/download-artifact@v5...v6.0.0

`v5.0.0`

Compare Source

What's Changed

Update README.md by @nebuk89 in #407
BREAKING fix: inconsistent path behavior for single artifact downloads by ID by @GrantBirki in #416

v5.0.0

🚨 Breaking Change

This release fixes an inconsistency in path behavior for single artifact downloads by ID. If you're downloading single artifacts by ID, the output path may change.

What Changed

Previously, single artifact downloads behaved differently depending on how you specified the artifact:

By name: name: my-artifact → extracted to path/ (direct)
By ID: artifact-ids: 12345 → extracted to path/my-artifact/ (nested)

Now both methods are consistent:

By name: name: my-artifact → extracted to path/ (unchanged)
By ID: artifact-ids: 12345 → extracted to path/ (fixed - now direct)

Migration Guide

✅ No Action Needed If:

You download artifacts by name
You download multiple artifacts by ID
You already use merge-multiple: true as a workaround

⚠️ Action Required If:

You download single artifacts by ID and your workflows expect the nested directory structure.

Before v5 (nested structure):

- uses: actions/download-artifact@v4
  with:
    artifact-ids: 12345
    path: dist

### Files were in: dist/my-artifact/

Where my-artifact is the name of the artifact you previously uploaded

To maintain old behavior (if needed):

- uses: actions/download-artifact@v5
  with:
    artifact-ids: 12345
    path: dist/my-artifact  # Explicitly specify the nested path

New Contributors

@nebuk89 made their first contribution in #407

Full Changelog: actions/download-artifact@v4...v5.0.0

nodejs/node (node)

pnpm/action-setup (pnpm/action-setup)

`v6.0.8`

Compare Source

`v6.0.7`

Compare Source

`v6.0.6`

Compare Source

What's Changed

fix: bin_dest output points to self-updated pnpm, not bootstrap by @zkochan in #249

Full Changelog: pnpm/action-setup@v6.0.5...v6.0.6

`v6.0.5`

Compare Source

What's Changed

fix: append (not prepend) action node dir to PATH for npm bootstrap by @zkochan in #241

Full Changelog: pnpm/action-setup@v6.0.4...v6.0.5

`v6.0.4`

Compare Source

What's Changed

fix: use npm co-located with the action node binary by @benquarmby in #239

New Contributors

@benquarmby made their first contribution in #239

Full Changelog: pnpm/action-setup@v6.0.3...v6.0.4

`v6.0.3`

Compare Source

Updated pnpm to v11.0.0-rc.5

Full Changelog: pnpm/action-setup@v6.0.2...v6.0.3

`v6.0.2`

Compare Source

What's Changed

fix: pnpm self-update binary shadowed by bootstrap on PATH by @oniani1 in #230

New Contributors

@oniani1 made their first contribution in #230

Full Changelog: pnpm/action-setup@v6.0.1...v6.0.2

`v6.0.1`

Compare Source

Update pnpm to v11.0.0-rc.2. pnpm-lock.yaml will not be saved with two documents unless the packageManager is set via devEngines.packageManager. Related issue: #228

`v6.0.0`

Compare Source

Configuration

📅 Schedule: (in timezone Asia/Shanghai)

Branch creation
- "before 10am on monday"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

netlify · 2026-05-17T16:36:24Z

✅ Deploy Preview for viteplus-preview ready!

Name	Link
🔨 Latest commit	`13414b0`
🔍 Latest deploy log	https://app.netlify.com/projects/viteplus-preview/deploys/6a0b19917cc6840008591938
😎 Deploy Preview	https://deploy-preview-1612--viteplus-preview.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.
🤖 Make changes	Run an agent on this branch

To edit notification comments on pull requests, go to your Netlify project configuration.

Brooooooklyn · 2026-05-18T12:48:52Z

@claude[agent] keep 22-alpine3.21

Agent-Logs-Url: https://github.com/voidzero-dev/vite-plus/sessions/3c71ac81-b84a-40c0-a795-270f2d2fa329 Co-authored-by: Brooooooklyn <3468483+Brooooooklyn@users.noreply.github.com>

Claude · 2026-05-18T12:50:09Z

@claude[agent] keep 22-alpine3.21

Done in d9ad904

renovate · 2026-05-18T13:15:34Z

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

chore(deps): update github actions

113e0e9

renovate Bot force-pushed the renovate/major-github-actions branch from 6bd786a to 113e0e9 Compare May 18, 2026 01:20

Claude started work on behalf of Brooooooklyn May 18, 2026 12:49 View session

chore(deps): keep node 22-alpine3.21

d9ad904

Agent-Logs-Url: https://github.com/voidzero-dev/vite-plus/sessions/3c71ac81-b84a-40c0-a795-270f2d2fa329 Co-authored-by: Brooooooklyn <3468483+Brooooooklyn@users.noreply.github.com>

Claude AI requested a review from Brooooooklyn May 18, 2026 12:50

Claude finished work on behalf of Brooooooklyn May 18, 2026 12:50

Brooooooklyn approved these changes May 18, 2026

View reviewed changes

Merge branch 'main' into renovate/major-github-actions

13414b0

fengmk2 approved these changes May 18, 2026

View reviewed changes

fengmk2 merged commit e8d0430 into main May 18, 2026
62 of 64 checks passed

fengmk2 deleted the renovate/major-github-actions branch May 18, 2026 14:24

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): update github actions (major)#1612

chore(deps): update github actions (major)#1612
fengmk2 merged 3 commits into
mainfrom
renovate/major-github-actions

renovate Bot commented May 17, 2026 •

edited

Loading

Uh oh!

netlify Bot commented May 17, 2026 •

edited

Loading

Uh oh!

Brooooooklyn commented May 18, 2026

Uh oh!

Claude AI commented May 18, 2026

Uh oh!

renovate Bot commented May 18, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Conversation

renovate Bot commented May 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

v8 - What's new

Direct downloads

Enforced checks (breaking)

ESM

What's Changed

v7 - What's new

Node.js 24

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

v5.0.0

🚨 Breaking Change

What Changed

Migration Guide

✅ No Action Needed If:

⚠️ Action Required If:

New Contributors

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

Configuration

Uh oh!

netlify Bot commented May 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅ Deploy Preview for viteplus-preview ready!

Uh oh!

Brooooooklyn commented May 18, 2026

Uh oh!

Claude AI commented May 18, 2026

Uh oh!

renovate Bot commented May 18, 2026

Edited/Blocked Notification

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

renovate Bot commented May 17, 2026 •

edited

Loading

netlify Bot commented May 17, 2026 •

edited

Loading