#9888 ci: Bump the actions group with 3 updates Pull request opened by dependabot[bot] Bumps the actions group with 3 updates: astral-sh/setup-uv, actions/download-artifact and actions/upload-artifact. Updates

astral-sh/setup-uv

from 7.3.0 to 7.3.1 Release notes Sourced from astral-sh/setup-uv's releases.

v7.3.1 🌈 fall back to VERSION_CODENAME when VERSION_ID is not available

Changes

This release adds support for running in containers like

debian:testing

or

debian:unstable

🐛 Bug fixes

• fix: fall back to VERSION_CODENAME when VERSION_ID is not available `@​eifinger-bot` (#774)

🧰 Maintenance

• chore: update known checksums for 0.10.6 @github-actions[bot] (#771)

• chore: update known checksums for 0.10.5 @github-actions[bot] (#770)

• chore: update known checksums for 0.10.4 @github-actions[bot] (#768)

• chore: update known checksums for 0.10.3 @github-actions[bot] (#767)

• chore: update known checksums for 0.10.2 @github-actions[bot] (#765)

• chore: update known checksums for 0.10.1 @github-actions[bot] (#764)

⬆️ Dependency updates

• Bump github/codeql-action from 4.31.9 to 4.32.2 @dependabot[bot] (#766)

• Bump zizmorcore/zizmor-action from 0.4.1 to 0.5.0 @dependabot[bot] (#763)

Commits • `5a095e7` Bump github/codeql-action from 4.31.9 to 4.32.2 (#766) • `b12532f` fix: fall back to VERSION_CODENAME when VERSION_ID is not available (#774) • `0098a75` chore: update known checksums for 0.10.6 (#771) • `2e7ed0e` chore: update known checksums for 0.10.5 (#770) • `04224aa` chore: update known checksums for 0.10.4 (#768) • `2bc602f` chore: update known checksums for 0.10.3 (#767) • `dd9d748` chore: update known checksums for 0.10.2 (#765) • `14eede1` chore: update known checksums for 0.10.1 (#764) • `c452423` Bump zizmorcore/zizmor-action from 0.4.1 to 0.5.0 (#763) • See full diff in compare view Updates

actions/download-artifact

from 7.0.0 to 8.0.0 Release notes Sourced from actions/download-artifact's releases.

v8.0.0

v8 - What's new

Direct downloads

To support direct uploads in

actions/upload-artifact

, the action will no longer attempt to unzip all downloaded files. Instead, the action checks the

Content-Type

header ahead of unzipping and skips non-zipped files. Callers wishing to download a zipped file as-is can also set the new

skip-decompress

parameter to

false

.

Enforced checks (breaking)

A previous release introduced digest checks on the download. If a download hash didn't match the expected hash from the server, the action would log a warning. Callers can now configure the behavior on mismatch with the

digest-mismatch

parameter. To be secure by default, we are now defaulting the behavior to

error

which will fail the workflow run.

ESM

To support new versions of the @actions/* packages, we've upgraded the package to ESM.

What's Changed

• Don't attempt to un-zip non-zipped downloads by `@​danwkennedy` in actions/download-artifact#460

• Add a setting to specify what to do on hash mismatch and default it to

error

by `@​danwkennedy` in actions/download-artifact#461

Full Changelog: actions/download-artifact@v7...v8.0.0

Commits • `70fc10c` Merge pull request #461 from actions/danwkennedy/digest-mismatch-behavior • `f258da9` Add change docs • `ccc058e` Fix linting issues • `bd7976b` Add a setting to specify what to do on hash mismatch and default it to

error

• `ac21fcf` Merge pull request #460 from actions/danwkennedy/download-no-unzip • `15999bf` Add note about package bumps • `974686e` Bump the version to

v8

and add release notes • `fbe48b1` Update test names to make it clearer what they do • `96bf374` One more test fix • `b8c4819` Fix skip decompress test • Additional commits viewable in compare view Updates `act… meltano/meltano