Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 27, 2025

Bumps actions/download-artifact from 5.0.0 to 6.0.0.

Release notes

Sourced from actions/download-artifact's releases.

v6.0.0

What's Changed

BREAKING CHANGE: this update supports Node v24.x. This is not a breaking change per-se but we're treating it as such.

New Contributors

Full Changelog: actions/download-artifact@v5...v6.0.0

Commits
  • 018cc2c Merge pull request #438 from actions/danwkennedy/prepare-6.0.0
  • 815651c Revert "Remove github.dep.yml"
  • bb3a066 Remove github.dep.yml
  • fa1ce46 Prepare v6.0.0
  • 4a24838 Merge pull request #431 from danwkennedy/patch-1
  • 5e3251c Readme: spell out the first use of GHES
  • abefc31 Merge pull request #424 from actions/yacaovsnc/update_readme
  • ac43a60 Update README with artifact extraction details
  • de96f46 Merge pull request #417 from actions/yacaovsnc/update_readme
  • 7993cb4 Remove migration guide for artifact download changes
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 5.0.0 to 6.0.0.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@634f93c...018cc2c)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Oct 27, 2025
@github-actions
Copy link
Contributor

MegaLinter analysis: Error

Descriptor Linter Files Fixed Errors Warnings Elapsed time
✅ ACTION actionlint 5 0 0 0.06s
✅ BASH bash-exec 1 0 0 0.0s
✅ BASH shellcheck 1 0 0 0.06s
✅ BASH shfmt 1 0 0 0.01s
❌ C cppcheck 8 8 0 0.33s
❌ CPP cppcheck 8 8 0 0.36s
✅ JSON npm-package-json-lint yes no no 0.64s
✅ JSON v8r 12 0 0 7.72s
✅ REPOSITORY gitleaks yes no no 16.34s
✅ REPOSITORY git_diff yes no no 0.45s
❌ REPOSITORY grype yes 2 no 44.0s
✅ REPOSITORY secretlint yes no no 48.35s
✅ REPOSITORY syft yes no no 3.12s
✅ REPOSITORY trivy-sbom yes no no 4.11s
✅ REPOSITORY trufflehog yes no no 5.98s
✅ XML xmllint 1 0 0 186.79s
✅ YAML v8r 13 0 0 8.55s

Detailed Issues

❌ C / cppcheck - 8 errors
Results of cppcheck linter (version 2.14.2)
See documentation on https://megalinter.io/9.1.0/descriptors/c_cppcheck/
-----------------------------------------------

❌ [ERROR] assets/2013-11-14-explorer-wall-avoider-kit/alternative_demo/DistanceSensor.h
    Checking assets/2013-11-14-explorer-wall-avoider-kit/alternative_demo/DistanceSensor.h ...
    assets/2013-11-14-explorer-wall-avoider-kit/alternative_demo/DistanceSensor.h:3:1: error: Code 'classSR04{' is invalid C code. Use --std or --language to configure the language. [syntaxError]
    class SR04 {
    ^

❌ [ERROR] assets/2013-11-14-explorer-wall-avoider-kit/alternative_demo/Motors.h
    Checking assets/2013-11-14-explorer-wall-avoider-kit/alternative_demo/Motors.h ...
    assets/2013-11-14-explorer-wall-avoider-kit/alternative_demo/Motors.h:3:1: error: Code 'classMotor{' is invalid C code. Use --std or --language to configure the language. [syntaxError]
    class Motor {
    ^

❌ [ERROR] assets/2013-11-14-explorer-wall-avoider-kit/demo_sketch/DistanceSensor.h
    Checking assets/2013-11-14-explorer-wall-avoider-kit/demo_sketch/DistanceSensor.h ...
    assets/2013-11-14-explorer-wall-avoider-kit/demo_sketch/DistanceSensor.h:3:1: error: Code 'classSR04{' is invalid C code. Use --std or --language to configure the language. [syntaxError]
    class SR04 {
    ^

❌ [ERROR] assets/2013-11-14-explorer-wall-avoider-kit/demo_sketch/TurtleMotors.h
    Checking assets/2013-11-14-explorer-wall-avoider-kit/demo_sketch/TurtleMotors.h ...
    assets/2013-11-14-explorer-wall-avoider-kit/demo_sketch/TurtleMotors.h:3:1: error: Code 'classMotor{' is invalid C code. Use --std or --language to configure the language. [syntaxError]
    class Motor {
    ^

❌ [ERROR] galleries/2013-11-14-explorer-wall-avoider-kit/alternative_demo/DistanceSensor.h
    Checking galleries/2013-11-14-explorer-wall-avoider-kit/alternative_demo/DistanceSensor.h ...
    galleries/2013-11-14-explorer-wall-avoider-kit/alternative_demo/DistanceSensor.h:3:1: error: Code 'classSR04{' is invalid C code. Use --std or --language to configure the language. [syntaxError]
    class SR04 {
    ^

❌ [ERROR] galleries/2013-11-14-explorer-wall-avoider-kit/alternative_demo/Motors.h
    Checking galleries/2013-11-14-explorer-wall-avoider-kit/alternative_demo/Motors.h ...
    galleries/2013-11-14-explorer-wall-avoider-kit/alternative_demo/Motors.h:3:1: error: Code 'classMotor{' is invalid C code. Use --std or --language to configure the language. [syntaxError]
    class Motor {
    ^

❌ [ERROR] galleries/2013-11-14-explorer-wall-avoider-kit/demo_sketch/DistanceSensor.h
    Checking galleries/2013-11-14-explorer-wall-avoider-kit/demo_sketch/DistanceSensor.h ...
    galleries/2013-11-14-explorer-wall-avoider-kit/demo_sketch/DistanceSensor.h:3:1: error: Code 'classSR04{' is invalid C code. Use --std or --language to configure the language. [syntaxError]
    class SR04 {
    ^

❌ [ERROR] galleries/2013-11-14-explorer-wall-avoider-kit/demo_sketch/TurtleMotors.h
    Checking galleries/2013-11-14-explorer-wall-avoider-kit/demo_sketch/TurtleMotors.h ...
    galleries/2013-11-14-explorer-wall-avoider-kit/demo_sketch/TurtleMotors.h:3:1: error: Code 'classMotor{' is invalid C code. Use --std or --language to configure the language. [syntaxError]
    class Motor {
    ^
❌ CPP / cppcheck - 8 errors
Results of cppcheck linter (version 2.14.2)
See documentation on https://megalinter.io/9.1.0/descriptors/cpp_cppcheck/
-----------------------------------------------

❌ [ERROR] assets/2013-11-14-explorer-wall-avoider-kit/alternative_demo/DistanceSensor.h
    Checking assets/2013-11-14-explorer-wall-avoider-kit/alternative_demo/DistanceSensor.h ...
    assets/2013-11-14-explorer-wall-avoider-kit/alternative_demo/DistanceSensor.h:3:1: error: Code 'classSR04{' is invalid C code. Use --std or --language to configure the language. [syntaxError]
    class SR04 {
    ^

❌ [ERROR] assets/2013-11-14-explorer-wall-avoider-kit/alternative_demo/Motors.h
    Checking assets/2013-11-14-explorer-wall-avoider-kit/alternative_demo/Motors.h ...
    assets/2013-11-14-explorer-wall-avoider-kit/alternative_demo/Motors.h:3:1: error: Code 'classMotor{' is invalid C code. Use --std or --language to configure the language. [syntaxError]
    class Motor {
    ^

❌ [ERROR] assets/2013-11-14-explorer-wall-avoider-kit/demo_sketch/DistanceSensor.h
    Checking assets/2013-11-14-explorer-wall-avoider-kit/demo_sketch/DistanceSensor.h ...
    assets/2013-11-14-explorer-wall-avoider-kit/demo_sketch/DistanceSensor.h:3:1: error: Code 'classSR04{' is invalid C code. Use --std or --language to configure the language. [syntaxError]
    class SR04 {
    ^

❌ [ERROR] assets/2013-11-14-explorer-wall-avoider-kit/demo_sketch/TurtleMotors.h
    Checking assets/2013-11-14-explorer-wall-avoider-kit/demo_sketch/TurtleMotors.h ...
    assets/2013-11-14-explorer-wall-avoider-kit/demo_sketch/TurtleMotors.h:3:1: error: Code 'classMotor{' is invalid C code. Use --std or --language to configure the language. [syntaxError]
    class Motor {
    ^

❌ [ERROR] galleries/2013-11-14-explorer-wall-avoider-kit/alternative_demo/DistanceSensor.h
    Checking galleries/2013-11-14-explorer-wall-avoider-kit/alternative_demo/DistanceSensor.h ...
    galleries/2013-11-14-explorer-wall-avoider-kit/alternative_demo/DistanceSensor.h:3:1: error: Code 'classSR04{' is invalid C code. Use --std or --language to configure the language. [syntaxError]
    class SR04 {
    ^

❌ [ERROR] galleries/2013-11-14-explorer-wall-avoider-kit/alternative_demo/Motors.h
    Checking galleries/2013-11-14-explorer-wall-avoider-kit/alternative_demo/Motors.h ...
    galleries/2013-11-14-explorer-wall-avoider-kit/alternative_demo/Motors.h:3:1: error: Code 'classMotor{' is invalid C code. Use --std or --language to configure the language. [syntaxError]
    class Motor {
    ^

❌ [ERROR] galleries/2013-11-14-explorer-wall-avoider-kit/demo_sketch/DistanceSensor.h
    Checking galleries/2013-11-14-explorer-wall-avoider-kit/demo_sketch/DistanceSensor.h ...
    galleries/2013-11-14-explorer-wall-avoider-kit/demo_sketch/DistanceSensor.h:3:1: error: Code 'classSR04{' is invalid C code. Use --std or --language to configure the language. [syntaxError]
    class SR04 {
    ^

❌ [ERROR] galleries/2013-11-14-explorer-wall-avoider-kit/demo_sketch/TurtleMotors.h
    Checking galleries/2013-11-14-explorer-wall-avoider-kit/demo_sketch/TurtleMotors.h ...
    galleries/2013-11-14-explorer-wall-avoider-kit/demo_sketch/TurtleMotors.h:3:1: error: Code 'classMotor{' is invalid C code. Use --std or --language to configure the language. [syntaxError]
    class Motor {
    ^
❌ REPOSITORY / grype - 2 errors
[0000]  WARN no explicit name and version provided for directory source, deriving artifact ID from the given path (which is not ideal)
NAME                      INSTALLED                                 FIXED IN  TYPE           VULNERABILITY        SEVERITY  EPSS          RISK         
tj-actions/changed-files  HIDDEN_BY_MEGALINTER 46.0.1    github-action  GHSA-mrrh-fwg8-r2c3  High      88.4% (99th)  84.5  (kev)  
tj-actions/changed-files  HIDDEN_BY_MEGALINTER 41        github-action  GHSA-mcph-m25j-8j63  High      0.7% (70th)   0.5
[0043] ERROR discovered vulnerabilities at or above the severity threshold

See detailed reports in MegaLinter artifacts

You could have the same capabilities but better runtime performances if you use a MegaLinter flavor:

Your project could benefit from a custom flavor, which would allow you to run only the linters you need, and thus improve runtime performances. (Skip this info by defining FLAVOR_SUGGESTIONS: false)

  • Documentation: Custom Flavors
  • Command: npx mega-linter-runner@9.1.0 --custom-flavor-setup --custom-flavor-linters ACTION_ACTIONLINT,BASH_EXEC,BASH_SHELLCHECK,BASH_SHFMT,C_CPPCHECK,CPP_CPPCHECK,JSON_V8R,JSON_NPM_PACKAGE_JSON_LINT,REPOSITORY_GIT_DIFF,REPOSITORY_GITLEAKS,REPOSITORY_GRYPE,REPOSITORY_SECRETLINT,REPOSITORY_SYFT,REPOSITORY_TRIVY_SBOM,REPOSITORY_TRUFFLEHOG,XML_XMLLINT,YAML_V8R

MegaLinter is graciously provided by OX Security

@dannystaple dannystaple merged commit 929376f into master Oct 29, 2025
6 checks passed
@dannystaple dannystaple deleted the dependabot/github_actions/actions/download-artifact-6.0.0 branch October 29, 2025 09:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants