chore(deps): update dawidd6/action-download-artifact action to v21

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
dawidd6/action-download-artifact	action	major	v6 → v21

---

Release Notes

dawidd6/action-download-artifact (dawidd6/action-download-artifact)

v21

Compare Source

What's Changed

• build(deps): bump @​actions/github from 9.0.0 to 9.1.0 by @​dependabot[bot] in #​396
• build(deps): bump filesize from 11.0.15 to 11.0.16 by @​dependabot[bot] in #​399
• build(deps): bump fast-xml-parser from 5.5.7 to 5.7.1 by @​dependabot[bot] in #​402
• build(deps): bump @​actions/github from 9.1.0 to 9.1.1 by @​dependabot[bot] in #​400
• build(deps): bump @​actions/core from 3.0.0 to 3.0.1 by @​dependabot[bot] in #​401
• build(deps): bump filesize from 11.0.16 to 11.0.17 by @​dependabot[bot] in #​404
• Download artifacts in creation order by @​matejdro in #​398
• node_modules: update by @​dawidd6 in #​405

New Contributors

• @​matejdro made their first contribution in #​398

Full Changelog: dawidd6/action-download-artifact@v20...v21

v20

Compare Source

What's Changed

• build(deps): bump fast-xml-parser from 5.5.6 to 5.5.7 by @​dependabot[bot] in #​387
• node_modules: update by @​dawidd6 in #​388
• build(deps): bump filesize from 11.0.13 to 11.0.14 by @​dependabot[bot] in #​389
• build(deps): bump brace-expansion by @​dependabot[bot] in #​390
• node_modules: update by @​dawidd6 in #​391
• build(deps): bump filesize from 11.0.14 to 11.0.15 by @​dependabot[bot] in #​392
• build(deps): bump adm-zip from 0.5.16 to 0.5.17 by @​dependabot[bot] in #​393
• build(deps): bump lodash from 4.17.23 to 4.18.1 by @​dependabot[bot] in #​394
• node_modules: update by @​dawidd6 in #​395

Full Changelog: dawidd6/action-download-artifact@v19...v20

v19

Compare Source

What's Changed

• build(deps): bump fast-xml-parser from 5.4.1 to 5.5.6 by @​dependabot[bot] in #​385
• node_modules: update by @​dawidd6 in #​386

Full Changelog: dawidd6/action-download-artifact@v18...v19

v18

Compare Source

What's Changed

• build(deps): bump @​actions/artifact from 6.2.0 to 6.2.1 by @​dependabot[bot] in #​381
• build(deps): bump undici from 6.23.0 to 6.24.0 by @​dependabot[bot] in #​382
• node_modules: update by @​dawidd6 in #​383

Full Changelog: dawidd6/action-download-artifact@v17...v18

v17

Compare Source

What's Changed

• build(deps): bump @​actions/artifact from 6.1.0 to 6.2.0 by @​dependabot[bot] in #​376
• build(deps): bump actions/upload-artifact from 6 to 7 by @​dependabot[bot] in #​377
• build(deps): bump fast-xml-parser from 5.3.6 to 5.4.1 by @​dependabot[bot] in #​378
• node_modules: update by @​dawidd6 in #​379
• Update Node version from 20 to 24

Full Changelog: dawidd6/action-download-artifact@v16...v17

v16

Compare Source

What's Changed

• build(deps): bump minimatch by @​dependabot[bot] in #​374
• node_modules: update by @​dawidd6 in #​375

Full Changelog: dawidd6/action-download-artifact@v15...v16

v15

Compare Source

What's Changed

• build(deps): bump @​actions/artifact from 6.0.0 to 6.1.0 by @​dependabot[bot] in #​369
• node_modules: update by @​dawidd6 in #​370
• build(deps): bump fast-xml-parser from 5.3.4 to 5.3.6 by @​dependabot[bot] in #​371
• node_modules: update by @​dawidd6 in #​372

Full Changelog: dawidd6/action-download-artifact@v14...v15

v14

Compare Source

What's Changed

• build(deps): bump fast-xml-parser from 5.3.3 to 5.3.4 by @​dependabot[bot] in #​367
• node_modules: update by @​dawidd6 in #​368

Full Changelog: dawidd6/action-download-artifact@v13...v14

v13

Compare Source

What's Changed

• build(deps): bump @​actions/artifact from 5.0.1 to 5.0.2 by @​dependabot[bot] in #​350
• build(deps): bump @​actions/github from 6.0.1 to 7.0.0 by @​dependabot[bot] in #​348
• build(deps): bump @​actions/core from 2.0.1 to 2.0.2 by @​dependabot[bot] in #​349
• node_modules: update by @​dawidd6 in #​351
• build(deps): bump lodash from 4.17.21 to 4.17.23 by @​dependabot[bot] in #​353
• node_modules: update by @​dawidd6 in #​354
• build(deps): bump @​actions/github from 7.0.0 to 8.0.0 by @​dependabot[bot] in #​355
• node_modules: update by @​dawidd6 in #​356
• build(deps): bump @​actions/core from 2.0.2 to 2.0.3 by @​dependabot[bot] in #​359
• build(deps): bump @​actions/artifact from 5.0.2 to 6.0.0 by @​dependabot[bot] in #​361
• build(deps): bump @​actions/core from 2.0.3 to 3.0.0 by @​dependabot[bot] in #​360
• build(deps): bump @​actions/github from 8.0.0 to 9.0.0 by @​dependabot[bot] in #​357
• Convert from CommonJS to ESM by @​Copilot in #​362
• Fix ES module imports for @​actions packages by @​Copilot in #​365
• node_modules: update by @​dawidd6 in #​366

New Contributors

• @​Copilot made their first contribution in #​362

Full Changelog: dawidd6/action-download-artifact@v12...v13

v12

Compare Source

What's Changed

• add missing merge_multiple docs by @​timostroehlein in #​331
• build(deps): bump actions/upload-artifact from 4 to 6 by @​dependabot[bot] in #​333
• build(deps): bump actions/checkout from 4 to 6 by @​dependabot[bot] in #​332
• build(deps): bump filesize from 9.0.11 to 11.0.13 by @​dependabot[bot] in #​334
• build(deps): bump @​actions/core from 1.11.1 to 2.0.1 by @​dependabot[bot] in #​336
• build(deps): bump @​actions/artifact from 2.3.2 to 5.0.1 by @​dependabot[bot] in #​335
• build(deps): bump glob from 10.4.5 to 10.5.0 by @​dependabot[bot] in #​338
• node_modules: update by @​dawidd6 in #​343
• build(deps): bump peter-evans/create-pull-request from 7 to 8 by @​dependabot[bot] in #​344
• node_modules: update by @​dawidd6 in #​347

Full Changelog: dawidd6/action-download-artifact@v11...v12

v11

Compare Source

Full Changelog: dawidd6/action-download-artifact@v10...v11

v10

Compare Source

What's Changed

• Fix the download-commit test to actually look for a commit by @​mstorsjo in #​330
• Add the option "ref", specifying either a commit or a branch by @​mstorsjo in #​329

New Contributors

• @​mstorsjo made their first contribution in #​330

Full Changelog: dawidd6/action-download-artifact@v9...v10

v9

Compare Source

What's Changed

• add merge_multiple option by @​timostroehlein in #​327

New Contributors

• @​timostroehlein made their first contribution in #​327

Full Changelog: dawidd6/action-download-artifact@v8...v9

v8

Compare Source

New features

• use_unzip boolean input (defaulting to false) - if set to true, the action will use system provided unzip utility for unpacking downloaded artifact(s) (note that the action will first download the .zip artifact file, then unpack it and remove the .zip file)

What's Changed

• README: v7 by @​haines in #​318
• Unzip by @​dawidd6 in #​325

New Contributors

• @​haines made their first contribution in #​318

Full Changelog: dawidd6/action-download-artifact@v7...v8

v7

Compare Source

What's Changed

• build(deps): bump fast-xml-parser from 4.4.0 to 4.4.1 by @​dependabot in #​299
• build(deps): bump @​actions/artifact from 2.1.7 to 2.1.9 by @​dependabot in #​300
• build(deps): bump adm-zip from 0.5.14 to 0.5.15 by @​dependabot in #​301
• build(deps): bump adm-zip from 0.5.15 to 0.5.16 by @​dependabot in #​306
• build(deps): bump path-to-regexp from 6.2.2 to 6.3.0 by @​dependabot in #​307
• build(deps): bump @​actions/artifact from 2.1.9 to 2.1.10 by @​dependabot in #​311
• build(deps): bump @​actions/core from 1.10.1 to 1.11.0 by @​dependabot in #​310
• build(deps): bump @​actions/core from 1.11.0 to 1.11.1 by @​dependabot in #​312
• build(deps): bump @​actions/artifact from 2.1.10 to 2.1.11 by @​dependabot in #​313
• build(deps): Fix cross-spawn >=7.0.0 <= 7.0.5 vulnerability by @​alexcouret in #​317

New Contributors

• @​alexcouret made their first contribution in #​317

Full Changelog: dawidd6/action-download-artifact@v6...v7

---

Configuration

📅 Schedule: (in timezone Europe/Bratislava)

• Branch creation
  • "after 6am and before 10am on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Trivy misconfiguration findings (HIGH + CRITICAL)

✅ No HIGH or CRITICAL misconfigurations detected.

[github-actions]

CVE delta

Net change

Severity	Added	Removed	Net
Critical	1	0	+1
High	13	0	+13
Medium	41	0	+41
Low	3	0	+3

Changed images: 1 of 2

Per-image detail

mongo-8.0.23

• Added: C:1 H:13 M:41 L:3
• Removed: C:0 H:0 M:0 L:0
  • [NEW]:
    • CVE-2025-68121 (CRITICAL) — stdlib
    • CVE-2025-58183 (HIGH) — stdlib
    • CVE-2025-61726 (HIGH) — stdlib
    • CVE-2025-61728 (HIGH) — stdlib
    • CVE-2025-61729 (HIGH) — stdlib
    • CVE-2026-25679 (HIGH) — stdlib
    • CVE-2026-32280 (HIGH) — stdlib
    • CVE-2026-32281 (HIGH) — stdlib
    • ...and 50 more