Repository navigation
joint fixes and improvements - #417
Merged
Merged
Conversation
There was a problem hiding this comment.
Pull request overview
Streams artifact downloads, adds raw-artifact support and digest validation, and improves workflow-run filtering.
Changes:
- Stream downloads while retaining a GHES fallback.
- Resolve tags and filter workflow status server-side.
- Document behavior and add raw-artifact integration coverage.
Reviewed changes
Copilot reviewed 5 out of 5 changed files in this pull request and generated 2 comments.
Show a summary per file
| File | Description |
|---|---|
main.js |
Implements streaming, validation, and filtering changes. |
README.md |
Updates capabilities and API usage documentation. |
action.yml |
Documents tag support for ref. |
.github/workflows/upload.yml |
Uploads a raw test artifact. |
.github/workflows/download.yml |
Tests raw-artifact downloads. |
ðĄ Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.
dawidd6
force-pushed
the
fix/artifact-downloads-and-triage
branch
from
August 15, 2026 14:25
fe7e81c to
2577e03
Compare
dawidd6
force-pushed
the
fix/artifact-downloads-and-triage
branch
from
August 15, 2026 14:30
2577e03 to
dccee5b
Compare
dawidd6
force-pushed
the
fix/artifact-downloads-and-triage
branch
from
August 15, 2026 14:47
dccee5b to
e6764fe
Compare
There was a problem hiding this comment.
Pull request overview
Copilot reviewed 5 out of 5 changed files in this pull request and generated no new comments.
Suppressed comments (1)
main.js:102
- The new tag-resolution path is not covered by the integration workflow: the existing
refjobs exercise only a branch and a commit SHA (.github/workflows/download.yml:97-127). Since this is the implementation intended to close #245, add coverage for a tagâideally an annotated tagâto verify it resolves to the expectedhead_shaand selects the intended workflow run.
const response = await client.rest.repos.getCommit({
owner: owner,
repo: repo,
ref: ref,
})
commit = response.data.sha
centosinfra-prod-github-app Bot
pushed a commit
to ansible-collections/amazon.aws
that referenced
this pull request
Sep 22, 2026
âĶates (#3099) Bumps the github-actions group with 2 updates in the / directory: dawidd6/action-download-artifact and SonarSource/sonarqube-scan-action. Updates dawidd6/action-download-artifact from 21 to 24 Release notes Sourced from dawidd6/action-download-artifact's releases. v24 What's Changed fix: preserve workflow run ordering by @âdawidd6 in dawidd6/action-download-artifact#425 Full Changelog: dawidd6/action-download-artifact@v23...v24 v23 Info This release is rather big. Not gonna lie to you, I've used LLMs to get there. I can't vouch for all the changes but CI confirms there should be no regressions. Please report any issues you encounter with this release. You can always revert to previous working one. What's Changed joint fixes and improvements by @âdawidd6 in dawidd6/action-download-artifact#417 build(deps): update brace-expansion by @âdawidd6 in dawidd6/action-download-artifact#418 Harden upload workflow token scope with explicit GITHUB_TOKEN permissions by @âdawidd6 with @âCopilot in dawidd6/action-download-artifact#419 fix: stream GHES artifact downloads by @âdawidd6 in dawidd6/action-download-artifact#420 chore: simplify action implementation by @âdawidd6 in dawidd6/action-download-artifact#421 chore: remove redundant action code by @âdawidd6 in dawidd6/action-download-artifact#422 chore: simplify artifact filtering by @âdawidd6 in dawidd6/action-download-artifact#423 Full Changelog: dawidd6/action-download-artifact@v22...v23 v22 What's Changed build(deps): bump fast-xml-builder from 1.1.5 to 1.2.0 by @âdependabot[bot] in dawidd6/action-download-artifact#406 build(deps): bump actions/checkout from 6 to 7 by @âdependabot[bot] in dawidd6/action-download-artifact#407 build(deps): bump undici from 6.24.0 to 6.27.0 by @âdependabot[bot] in dawidd6/action-download-artifact#408 build(deps): bump filesize from 11.0.17 to 11.0.18 by @âdependabot[bot] in dawidd6/action-download-artifact#409 build(deps): bump filesize from 11.0.18 to 11.0.19 by @âdependabot[bot] in dawidd6/action-download-artifact#410 build(deps): bump adm-zip from 0.5.17 to 0.5.18 by @âdependabot[bot] in dawidd6/action-download-artifact#411 build(deps): bump filesize from 11.0.19 to 11.0.22 by @âdependabot[bot] in dawidd6/action-download-artifact#412 build(deps): bump adm-zip from 0.5.18 to 0.6.0 by @âdependabot[bot] in dawidd6/action-download-artifact#414 build(deps): bump undici from 6.27.0 to 6.28.0 by @âdependabot[bot] in dawidd6/action-download-artifact#415 node_modules: update by @âdawidd6 in dawidd6/action-download-artifact#416 Continue downloading after expired artifacts in non-fatal modes by @âoiahoon in dawidd6/action-download-artifact#413 New Contributors @âoiahoon made their first contribution in dawidd6/action-download-artifact#413 Full Changelog: dawidd6/action-download-artifact@v21...v22 Commits d63b86a fix: preserve workflow run ordering (#425) 57aa996 chore: simplify artifact filtering (#423) 7325d46 chore: remove redundant action code (#422) fdd98d5 chore: simplify action implementation (#421) 2156211 fix: stream GHES artifact downloads (#420) a64f37f Harden upload workflow token scope with explicit GITHUB_TOKEN permissions (... b3e5a4c build(deps): update brace-expansion (#418) 01843d9 joint fixes and improvements (#417) 7f871e0 fix: continue after expired artifacts (#413) 0015e1b node_modules: update (#416) Additional commits viewable in compare view Updates SonarSource/sonarqube-scan-action from 8.2.1 to 8.2.2 Release notes Sourced from SonarSource/sonarqube-scan-action's releases. v8.2.2 What's Changed SQSCANGHA-159 Bump undici from 6.24.1 to 6.28.1 by @âdependabot[bot] in SonarSource/sonarqube-scan-action#261 Full Changelog: SonarSource/sonarqube-scan-action@v8.2.1...v8.2.2 Commits ba9859e SQSCANGHA-159 Bump undici from 6.24.1 to 6.28.1 (#261) 5bc5285 Rename code-quality teams to code-orchestration in CODEOWNERS ad82103 SQSCANGHA-158 NO-JIRA Bump actions/checkout from 7.0.0 to 7.0.1 (#260) 7451daf SQSCANGHA-157 NO-JIRA Bump actions/setup-node from 6.4.0 to 7.0.0 (#259) See full diff in compare view Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase. Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: @dependabot rebase will rebase this PR @dependabot recreate will recreate this PR, overwriting any edits that have been made to it @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions Reviewed-by: Bikouo Aubin Reviewed-by: Don Naro <dnaro@redhat.com> Reviewed-by: Alina Buzachis
This was referenced Sep 25, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
actions/download-artifactand document API usageGitHub Enterprise Server keeps the existing buffered ZIP download path because
@actions/artifactdoes not support GHES.Checks
node --check main.jsgit diff --checkFixes #403
Fixes #201
Fixes #230
Fixes #245
Fixes #223
Fixes #298
Fixes #164