Bump actions/download-artifact from 7 to 8 by dependabot[bot] · Pull Request #5445 · jesseduffield/lazygit

dependabot · Mar 31, 2026

Bumps actions/download-artifact from 7 to 8.

Release notes

Sourced from actions/download-artifact's releases.

v8.0.0

v8 - What's new

[!IMPORTANT] actions/download-artifact@v8 has been migrated to an ESM module. This should be transparent to the caller but forks might need to make significant changes.

[!IMPORTANT] Hash mismatches will now error by default. Users can override this behavior with a setting change (see below).

Direct downloads

To support direct uploads in actions/upload-artifact, the action will no longer attempt to unzip all downloaded files. Instead, the action checks the Content-Type header ahead of unzipping and skips non-zipped files. Callers wishing to download a zipped file as-is can also set the new skip-decompress parameter to true.

Enforced checks (breaking)

A previous release introduced digest checks on the download. If a download hash didn't match the expected hash from the server, the action would log a warning. Callers can now configure the behavior on mismatch with the digest-mismatch parameter. To be secure by default, we are now defaulting the behavior to error which will fail the workflow run.

ESM

To support new versions of the @actions/* packages, we've upgraded the package to ESM.

What's Changed

Don't attempt to un-zip non-zipped downloads by @danwkennedy in actions/download-artifact#460

Add a setting to specify what to do on hash mismatch and default it to error by @danwkennedy in actions/download-artifact#461

Full Changelog: actions/download-artifact@v7...v8.0.0

Commits

3e5f45b Add regression tests for CJK characters (#471)
e6d03f6 Add a regression test for artifact name + content-type mismatches (#472)
70fc10c Merge pull request #461 from actions/danwkennedy/digest-mismatch-behavior
f258da9 Add change docs
ccc058e Fix linting issues
bd7976b Add a setting to specify what to do on hash mismatch and default it to error
ac21fcf Merge pull request #460 from actions/danwkennedy/download-no-unzip
15999bf Add note about package bumps
974686e Bump the version to v8 and add release notes
fbe48b1 Update test names to make it clearer what they do
Additional commits viewable in compare view

Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 7 to 8. - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](actions/download-artifact@v7...v8) --- updated-dependencies: - dependency-name: actions/download-artifact dependency-version: '8' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>

codacy-production · Mar 31, 2026

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

_{TIP This summary will be updated as you push new changes. Give us feedback}

This MR contains the following updates: | Package | Update | Change | |---|---|---| | [jesseduffield/lazygit](https://github.com/jesseduffield/lazygit) | minor | `v0.60.0` → `v0.61.0` | MR created with the help of [el-capitano/tools/renovate-bot](https://gitlab.com/el-capitano/tools/renovate-bot). **Proposed changes to behavior should be submitted there as MRs.** --- ### Release Notes <details> <summary>jesseduffield/lazygit (jesseduffield/lazygit)</summary> ### [`v0.61.0`](https://github.com/jesseduffield/lazygit/releases/tag/v0.61.0) [Compare Source](jesseduffield/lazygit@v0.60.0...v0.61.0)  The big one in this release is support for GitHub pull requests. They are shown as little GitHub icons next to each branch that has one, and you can open a MR in the browser by pressing shift-G. To enable this, all you need to do is install the [`gh`](https://cli.github.com/) tool if you haven't already, and log in using `gh auth login`. #### What's Changed ##### Features ✨ - Show pull requests against branches by [@jesseduffield](https://github.com/jesseduffield) in [#2781](jesseduffield/lazygit#2781) ##### Enhancements 🔥 - Add support for clicking on arrows in the file list to expand/collapse directories by [@blakemckeany](https://github.com/blakemckeany) in [#5365](jesseduffield/lazygit#5365) - Remove empty directories after discarding untracked files by [@stefanhaller](https://github.com/stefanhaller) in [#5408](jesseduffield/lazygit#5408) - Make file sort order and case sensitivity configurable, and default to mix files and folders by [@stefanhaller](https://github.com/stefanhaller) in [#5427](jesseduffield/lazygit#5427) - Allow customizing the window width/height thresholds for when to use portrait mode by [@stefanhaller](https://github.com/stefanhaller) in [#5452](jesseduffield/lazygit#5452) - Log hashes of local branches when deleting them by [@stefanhaller](https://github.com/stefanhaller) in [#5441](jesseduffield/lazygit#5441) - Add condition field to custom command prompts by [@mrt181](https://github.com/mrt181) in [#5364](jesseduffield/lazygit#5364) ##### Fixes 🔧 - Fix staging only some lines of a block of consecutive changes by [@stefanhaller](https://github.com/stefanhaller) in [#5396](jesseduffield/lazygit#5396) - Fix the expanded layout of the branches panel (half and full screen modes) by [@stefanhaller](https://github.com/stefanhaller) in [#5413](jesseduffield/lazygit#5413) - Fix searching commits or main view after switching repos by [@stefanhaller](https://github.com/stefanhaller) in [#5424](jesseduffield/lazygit#5424) - Scroll to top when showing subcommits by [@stefanhaller](https://github.com/stefanhaller) in [#5425](jesseduffield/lazygit#5425) - Fix patch commands when git config has color=always by [@matthijskooijman](https://github.com/matthijskooijman) in [#5405](jesseduffield/lazygit#5405) - Don't stage out-of-date submodules when asking user to auto-stage after resolving conflicts by [@stefanhaller](https://github.com/stefanhaller) in [#5440](jesseduffield/lazygit#5440) ##### Maintenance ⚙️ - Remove go-git dependency by [@stefanhaller](https://github.com/stefanhaller) in [#5420](jesseduffield/lazygit#5420) - Make Debian/Ubuntu install command architecture-independent by [@discapes](https://github.com/discapes) in [#5386](jesseduffield/lazygit#5386) - Bump github.com/buger/jsonparser from 1.1.1 to 1.1.2 by [@dependabot](https://github.com/dependabot)\[bot] in [#5423](jesseduffield/lazygit#5423) - fix: pin 7 unpinned action(s), extract 1 inline secret to env var by [@dagecko](https://github.com/dagecko) in [#5439](jesseduffield/lazygit#5439) - Fix dependabot config file by [@stefanhaller](https://github.com/stefanhaller) in [#5443](jesseduffield/lazygit#5443) - Bump actions/cache from 4 to 5 by [@dependabot](https://github.com/dependabot)\[bot] in [#5444](jesseduffield/lazygit#5444) - Bump actions/download-artifact from 7 to 8 by [@dependabot](https://github.com/dependabot)\[bot] in [#5445](jesseduffield/lazygit#5445) - Bump actions/upload-artifact from 6 to 7 by [@dependabot](https://github.com/dependabot)\[bot] in [#5446](jesseduffield/lazygit#5446) - Bump github.com/lucasb-eyer/go-colorful from 1.3.0 to 1.4.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#5447](jesseduffield/lazygit#5447) - Bump github.com/spf13/afero from 1.9.5 to 1.15.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#5448](jesseduffield/lazygit#5448) - Bump github.com/creack/pty from 1.1.11 to 1.1.24 by [@dependabot](https://github.com/dependabot)\[bot] in [#5449](jesseduffield/lazygit#5449) - Bump github.com/stretchr/testify from 1.10.0 to 1.11.1 by [@dependabot](https://github.com/dependabot)\[bot] in [#5450](jesseduffield/lazygit#5450) - Bump github.com/sanity-io/litter from 1.5.2 to 1.5.8 by [@dependabot](https://github.com/dependabot)\[bot] in [#5451](jesseduffield/lazygit#5451) - Bump github.com/adrg/xdg from 0.4.0 to 0.5.3 by [@dependabot](https://github.com/dependabot)\[bot] in [#5456](jesseduffield/lazygit#5456) - Bump github.com/spkg/bom from 0.0.0-20160624110644-59b7046e48ad to 1.0.1 by [@dependabot](https://github.com/dependabot)\[bot] in [#5457](jesseduffield/lazygit#5457) - Bump github.com/integrii/flaggy from 1.4.0 to 1.8.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#5458](jesseduffield/lazygit#5458) - Bump github.com/sahilm/fuzzy from 0.1.0 to 0.1.1 by [@dependabot](https://github.com/dependabot)\[bot] in [#5459](jesseduffield/lazygit#5459) - Bump github.com/sasha-s/go-deadlock from 0.3.6 to 0.3.9 by [@dependabot](https://github.com/dependabot)\[bot] in [#5460](jesseduffield/lazygit#5460) ##### Docs 📖 - Add a note about AI to CONTRIBUTING.md by [@stefanhaller](https://github.com/stefanhaller) in [#5404](jesseduffield/lazygit#5404) - Update redo keybinding in README.md by [@unikitty37](https://github.com/unikitty37) in [#5387](jesseduffield/lazygit#5387) - Fix grammar in the contributor guide by [@Rohan5commit](https://github.com/Rohan5commit) in [#5392](jesseduffield/lazygit#5392) ##### I18n 🌎 - Update translations from Crowdin by [@stefanhaller](https://github.com/stefanhaller) in [#5476](jesseduffield/lazygit#5476) ##### Performance Improvements 📊 - Improve performance of discarding many files by [@stefanhaller](https://github.com/stefanhaller) in [#5407](jesseduffield/lazygit#5407) #### New Contributors - [@blakemckeany](https://github.com/blakemckeany) made their first contribution in [#5365](jesseduffield/lazygit#5365) - [@discapes](https://github.com/discapes) made their first contribution in [#5386](jesseduffield/lazygit#5386) - [@unikitty37](https://github.com/unikitty37) made their first contribution in [#5387](jesseduffield/lazygit#5387) - [@Rohan5commit](https://github.com/Rohan5commit) made their first contribution in [#5392](jesseduffield/lazygit#5392) - [@matthijskooijman](https://github.com/matthijskooijman) made their first contribution in [#5405](jesseduffield/lazygit#5405) - [@dagecko](https://github.com/dagecko) made their first contribution in [#5439](jesseduffield/lazygit#5439) - [@mrt181](https://github.com/mrt181) made their first contribution in [#5364](jesseduffield/lazygit#5364) **Full Changelog**: <jesseduffield/lazygit@v0.60.0...v0.61.0> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this MR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this MR, check this box --- This MR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).

dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Mar 31, 2026

dependabot Bot force-pushed the dependabot/github_actions/actions/download-artifact-8 branch from 70e2eb7 to 3804dc7 Compare March 31, 2026 11:19

stefanhaller added the maintenance For refactorings, CI changes, tests, version bumping, etc label Mar 31, 2026

stefanhaller enabled auto-merge March 31, 2026 11:19

stefanhaller merged commit d0e7842 into master Mar 31, 2026
13 of 14 checks passed

stefanhaller deleted the dependabot/github_actions/actions/download-artifact-8 branch March 31, 2026 11:21

BrewTestBot mentioned this pull request Apr 6, 2026

lazygit 0.61.0 Homebrew/homebrew-core#276329

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump actions/download-artifact from 7 to 8 - #5445

Bump actions/download-artifact from 7 to 8#5445
stefanhaller merged 1 commit into
masterjesseduffield/lazygit:masterfrom
dependabot/github_actions/actions/download-artifact-8jesseduffield/lazygit:dependabot/github_actions/actions/download-artifact-8Copy head branch name to clipboard

dependabot Bot commented on behalf of github Mar 31, 2026 •

edited

Loading

Uh oh!

codacy-production Bot commented Mar 31, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Search code, repositories, users, issues, pull requests...

Uh oh!

Conversation

dependabot Bot commented on behalf of github Mar 31, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v8.0.0

v8 - What's new

Direct downloads

Enforced checks (breaking)

ESM

What's Changed

Uh oh!

codacy-production Bot commented Mar 31, 2026

Up to standards ✅

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Mar 31, 2026 •

edited

Loading