From 4978cc2fe8b8119725fa8d927bec559b47abac64 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 19 Oct 2026 18:23:36 +0000 Subject: [PATCH 1/2] chore(deps): bump actions/download-artifact from 8.0.1 to 8.0.2 Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 8.0.1 to 8.0.2. - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](https://github.com/actions/download-artifact/compare/3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c...9000827ccba6bdab643e8b6fd33ac0654aef8333) --- updated-dependencies: - dependency-name: actions/download-artifact dependency-version: 8.0.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- .../castiron-custom-code-comment.yml | 2 +- .github/workflows/ci.yml | 20 +++++++++---------- .github/workflows/codeql.yml | 2 +- .github/workflows/help-compatibility.yml | 6 +++--- .github/workflows/publish-release.yml | 4 ++-- 5 files changed, 17 insertions(+), 17 deletions(-) diff --git a/.github/workflows/castiron-custom-code-comment.yml b/.github/workflows/castiron-custom-code-comment.yml index 43f3a1da2..33a44e0eb 100644 --- a/.github/workflows/castiron-custom-code-comment.yml +++ b/.github/workflows/castiron-custom-code-comment.yml @@ -254,7 +254,7 @@ jobs: - name: Download this workflow's trusted report if: needs.compute.result == 'success' - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 + uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2 with: artifact-ids: ${{ needs.compute.outputs.artifact-id }} merge-multiple: true diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 894e3851f..88efb5f12 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -26,7 +26,7 @@ jobs: timeout-minutes: 5 steps: - name: Download prepared source - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8 + uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8 with: artifact-ids: ${{ needs.source.outputs.artifact-id }} path: ${{ runner.temp }}/ci-inputs @@ -56,7 +56,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Download prepared source - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8 + uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8 with: artifact-ids: ${{ needs.source.outputs.artifact-id }} path: ${{ runner.temp }}/ci-inputs @@ -78,7 +78,7 @@ jobs: runs-on: macos-latest steps: - name: Download prepared source - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8 + uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8 with: artifact-ids: ${{ needs.source.outputs.artifact-id }} path: ${{ runner.temp }}/ci-inputs @@ -106,7 +106,7 @@ jobs: OPENAI_CLI_REQUIRE_NATIVE_SHELLS: bash,zsh,fish steps: - name: Download prepared source - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8 + uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8 with: artifact-ids: ${{ needs.source.outputs.artifact-id }} path: ${{ runner.temp }}/ci-inputs @@ -437,7 +437,7 @@ jobs: POWERSHELL_UPDATECHECK: 'Off' steps: - name: Download prepared source - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8 + uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8 with: artifact-ids: ${{ needs.source.outputs.artifact-id }} path: ${{ runner.temp }}/ci-inputs @@ -741,7 +741,7 @@ jobs: sha256: 2FD04091F7AACF2BBBA470EDC92A28034CD6F54999F7A880404AD17954476ABF steps: - name: Download prepared source - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8 + uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8 with: artifact-ids: ${{ needs.source.outputs.artifact-id }} path: ${{ runner.temp }}/ci-inputs @@ -1049,7 +1049,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Download prepared source - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8 + uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8 with: artifact-ids: ${{ needs.source.outputs.artifact-id }} path: ${{ runner.temp }}/ci-inputs @@ -1164,7 +1164,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Download prepared source - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8 + uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8 with: artifact-ids: ${{ needs.source.outputs.artifact-id }} path: ${{ runner.temp }}/ci-inputs @@ -1205,7 +1205,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Download prepared source - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8 + uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8 with: artifact-ids: ${{ needs.source.outputs.artifact-id }} path: ${{ runner.temp }}/ci-inputs @@ -1232,7 +1232,7 @@ jobs: shard: [0, 1, 2, 3] steps: - name: Download prepared source - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8 + uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8 with: artifact-ids: ${{ needs.source.outputs.artifact-id }} path: ${{ runner.temp }}/ci-inputs diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 27d51353e..0222f6d62 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -47,7 +47,7 @@ jobs: steps: - name: Download prepared source - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8 + uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8 with: artifact-ids: ${{ needs.source.outputs.artifact-id }} path: ${{ runner.temp }}/ci-inputs diff --git a/.github/workflows/help-compatibility.yml b/.github/workflows/help-compatibility.yml index 65c8a04eb..1371b30d9 100644 --- a/.github/workflows/help-compatibility.yml +++ b/.github/workflows/help-compatibility.yml @@ -31,7 +31,7 @@ jobs: os: [macos-15-intel, windows-11-arm] steps: - name: Download prepared source - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8 + uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8 with: artifact-ids: ${{ needs.source.outputs.artifact-id }} path: ${{ runner.temp }}/ci-inputs @@ -147,7 +147,7 @@ jobs: shells: cmd,powershell,pwsh steps: - name: Download prepared source - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8 + uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8 with: artifact-ids: ${{ needs.source.outputs.artifact-id }} path: ${{ runner.temp }}/ci-inputs @@ -1678,7 +1678,7 @@ jobs: "WSL_PAGER_WORK_DEADLINE=$($started.AddMinutes(20).ToString('o'))" >> $env:GITHUB_ENV "WSL_PAGER_CLEANUP_DEADLINE=$($started.AddMinutes(23).ToString('o'))" >> $env:GITHUB_ENV - name: Download prepared source - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8 + uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8 with: artifact-ids: ${{ needs.source.outputs.artifact-id }} path: ${{ runner.temp }}/ci-inputs diff --git a/.github/workflows/publish-release.yml b/.github/workflows/publish-release.yml index c09b634d0..8ccbcf0b7 100644 --- a/.github/workflows/publish-release.yml +++ b/.github/workflows/publish-release.yml @@ -160,7 +160,7 @@ jobs: run: | "$RUNNER_TEMP/openai-cli-govulncheck" "$GITHUB_WORKSPACE" - name: Download isolated release inputs - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 + uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2 with: name: openai-release-inputs path: ${{ runner.temp }}/openai-release-inputs @@ -271,7 +271,7 @@ jobs: id-token: write steps: - name: Download release artifacts - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 + uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2 with: name: release-artifacts path: dist From 386a6e5532c7c4c53bcfc2a26ae689b92bf0904b Mon Sep 17 00:00:00 2001 From: Justin Beckwith Date: Tue, 20 Oct 2026 13:23:31 -0700 Subject: [PATCH 2/2] fix: preserve generated workflow and align download pin test --- .github/workflows/castiron-custom-code-comment.yml | 2 +- internal/releaseworkflow/workflow_test.go | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/castiron-custom-code-comment.yml b/.github/workflows/castiron-custom-code-comment.yml index b3dea7795..11588b314 100644 --- a/.github/workflows/castiron-custom-code-comment.yml +++ b/.github/workflows/castiron-custom-code-comment.yml @@ -258,7 +258,7 @@ jobs: - name: Download this workflow's trusted report if: needs.compute.result == 'success' - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2 + uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 with: artifact-ids: ${{ needs.compute.outputs.artifact-id }} merge-multiple: true diff --git a/internal/releaseworkflow/workflow_test.go b/internal/releaseworkflow/workflow_test.go index 63739396d..db7d3d458 100644 --- a/internal/releaseworkflow/workflow_test.go +++ b/internal/releaseworkflow/workflow_test.go @@ -21,7 +21,7 @@ const ( checkoutAction = "actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1" setupGoAction = "actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e" uploadArtifactAction = "actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a" - downloadArtifactAction = "actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c" + downloadArtifactAction = "actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333" ) var releaseInputPaths = []string{