Skip to content

Bump actions/download-artifact from 4 to 8#26

Open
dependabot[bot] wants to merge 54 commits intomainfrom
dependabot/github_actions/actions/download-artifact-8
Open

Bump actions/download-artifact from 4 to 8#26
dependabot[bot] wants to merge 54 commits intomainfrom
dependabot/github_actions/actions/download-artifact-8

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Mar 10, 2026

Bumps actions/download-artifact from 4 to 8.

Release notes

Sourced from actions/download-artifact's releases.

v8.0.0

v8 - What's new

Direct downloads

To support direct uploads in actions/upload-artifact, the action will no longer attempt to unzip all downloaded files. Instead, the action checks the Content-Type header ahead of unzipping and skips non-zipped files. Callers wishing to download a zipped file as-is can also set the new skip-decompress parameter to false.

Enforced checks (breaking)

A previous release introduced digest checks on the download. If a download hash didn't match the expected hash from the server, the action would log a warning. Callers can now configure the behavior on mismatch with the digest-mismatch parameter. To be secure by default, we are now defaulting the behavior to error which will fail the workflow run.

ESM

To support new versions of the @actions/* packages, we've upgraded the package to ESM.

What's Changed

Full Changelog: actions/download-artifact@v7...v8.0.0

v7.0.0

v7 - What's new

[!IMPORTANT] actions/download-artifact@v7 now runs on Node.js 24 (runs.using: node24) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.

Node.js 24

This release updates the runtime to Node.js 24. v6 had preliminary support for Node 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.

What's Changed

New Contributors

Full Changelog: actions/download-artifact@v6.0.0...v7.0.0

v6.0.0

What's Changed

BREAKING CHANGE: this update supports Node v24.x. This is not a breaking change per-se but we're treating it as such.

... (truncated)

Commits
  • 70fc10c Merge pull request #461 from actions/danwkennedy/digest-mismatch-behavior
  • f258da9 Add change docs
  • ccc058e Fix linting issues
  • bd7976b Add a setting to specify what to do on hash mismatch and default it to error
  • ac21fcf Merge pull request #460 from actions/danwkennedy/download-no-unzip
  • 15999bf Add note about package bumps
  • 974686e Bump the version to v8 and add release notes
  • fbe48b1 Update test names to make it clearer what they do
  • 96bf374 One more test fix
  • b8c4819 Fix skip decompress test
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

AidanPark and others added 30 commits February 22, 2026 23:34
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Step 3 now only requires `pkg update -y && pkg install -y curl`.
The installer handles pkg upgrade, termux-wake-lock automatically.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
- Step 6: always instruct opening a new tab for gateway (not conditional)
- Step 7: note to run sshd in a separate tab
- Step 4: replace inline SSH commands with guide link
- SSH guide: remove tab switching instructions (now covered in README)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
clawhub depends on undici for HTTP requests, but Node.js v24+ on
Termux doesn't bundle it. Install clawhub and its undici dependency
automatically during install and update (new step 6/7 in updater).
Also add troubleshooting entries for the undici error.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
- Add oa.sh as unified CLI (oa --update/--uninstall/--status/--version/--help)
- Add CLAWDHUB_WORKDIR env var to direct skill installs to ~/.openclaw/workspace
- Add skill migration from ~/skills/ to correct path in update-core.sh
- Add OA_VERSION=0.8 to install.sh, update-core.sh, and oa.sh
- Convert oaupdate to thin wrapper (exec oa --update) after first update
- Add oa install/removal to install.sh, update-core.sh, uninstall.sh, bootstrap.sh
- Add YELLOW color var to install.sh to fix set -u crash on clawhub warnings
- Fix rm -f empty string crash in update-core.sh sharp cleanup
- Fix oa --status NODE_OPTIONS display logic
- Add oa --version latest version check from GitHub
- Update README.md/README.ko.md with CLI reference, oa commands, project structure
- Update troubleshooting docs with oa --update references

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
- Add dpkg check for libvips/binutils before running pkg install
- Fix undici check to run from clawhub directory instead of global context
  (node -e require('undici') always failed globally since undici is installed
  locally in clawdhub/node_modules, causing reinstall on every update)
- Apply same undici check fix to install.sh

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
- Add android-tools package to install-deps.sh and update-core.sh
- Detect Phantom Process Killer status in check-env.sh and update-core.sh (API 31+)
- Create disable guide with step-by-step screenshots (EN/KO)
- Link guide from README Known Issues section
- Add dontkillmyapp.com reference for device-specific workarounds

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
- Bump OA_VERSION to 0.8.1 in oa.sh, install.sh, update-core.sh
- Move dashboard and PPK sections out of setup steps (steps 1-6 only)
- Reorder sections to match between EN/KO READMEs
- Move Bonus: AI CLI Tools after technical docs section

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Install code-server with three workarounds for Termux compatibility:
replace bundled glibc node with Termux node, patch argon2 native
module with JS stub, and recover .node files from hard link failures.

New: patches/argon2-stub.js, scripts/install-code-server.sh
Modified: install.sh (8 steps), update-core.sh (8 steps), oa.sh
(ide command), uninstall.sh, bootstrap.sh, setup-env.sh,
verify-install.sh, README.md

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
openclaw --version output format may differ from npm view, causing
the version check to fail and triggering unnecessary npm reinstall
(including full llama.cpp rebuild). Use npm list -g to extract the
installed version in the same format as npm view.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
code-server v4.109+ uses argon2.cjs as the module entry point instead
of argon2.js. The find pattern now checks argon2.cjs first, then falls
back to argon2.js and index.js for older versions.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
TMPFILE was declared local in cmd_update() but the EXIT trap fired
after the function returned, when the variable was out of scope.
Replace trap with explicit rm -f cleanup.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Add install-ai-tools.sh with checkbox UI for selecting Claude Code,
Gemini CLI, and Codex CLI during install and update. Non-interactive
mode (curl | bash) skips selection automatically. Reorder independent
steps to: sharp → clawhub → code-server → AI CLI tools. Show AI CLI
tools status in oa --status.
…de installer)

- glibc-compat.js: os.cpus() fallback and networkInterfaces try-catch for Android kernel quirks
- install-glibc-env.sh: glibc-runner + Node.js v22 with grun-style wrapper (no patchelf)
- install-opencode.sh: OpenCode + oh-my-opencode via proot + ld.so concatenation for Bun standalone binaries

Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-opencode)

Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>
- setup-env.sh: Replace Bionic vars (NODE_OPTIONS, CFLAGS, CXXFLAGS, GYP_DEFINES) with glibc vars (OA_GLIBC, CPATH for glib-2.0 headers). Node wrapper now auto-loads glibc-compat.js
- apply-patches.sh: Reference glibc-compat.js instead of bionic-compat.js
- check-env.sh: Bump minimum disk from 500MB to 1000MB for glibc environment

Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-opencode)

Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>
- install.sh: 10-step glibc installer (glibc-env, OpenCode, verification). Uses --ignore-scripts to skip native modules that fail on Termux (koffi/renameat2), sharp rebuilt separately
- bootstrap.sh: Add install-glibc-env.sh and install-opencode.sh to FILES array
- install-deps.sh: Remove nodejs-lts (Node.js now installed as glibc binary in step 3)

Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-opencode)

Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>
- Add 'oa opencode' command (start/stop/status via tmux)
- Add 'oa opencode --stop' and 'oa opencode --status'
- Add glibc component checks to 'oa --status' (ld.so, wrapper, opencode, omo)
- Bump OA_VERSION from 0.8.2 to 1.0.0

Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-opencode)

Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>
…ller

- update-core.sh: Detect Bionic architecture and auto-migrate to glibc (install glibc-runner, Node.js, create wrappers). Use --ignore-scripts for npm install. Set CPATH for native builds
- uninstall.sh: Clean up glibc artifacts (ld.so files, proot-root, bun cache, opencode/omo wrappers)

Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-opencode)

Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>
- verify-install.sh: Add glibc-specific checks (ld.so, glibc-arch marker, node wrapper, OA_GLIBC, opencode command)
- build-sharp.sh: Set CPATH for glib-2.0 headers unconditionally; conditionally apply Bionic CFLAGS/CXXFLAGS/GYP_DEFINES only on legacy installs

Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-opencode)

Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>
- README.md: Document glibc-based architecture, 10-step install flow, 9-step update flow, OpenCode CLI commands, and project structure
- docs/plan/: Full migration plan with PoC results, technical review findings, and research

Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-opencode)

Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>
…mpat.js

- Fix node wrapper smart -- arg handling in install-glibc-env.sh
- Add process.execPath override in glibc-compat.js for child processes
- Add patches/spawn.h to bootstrap.sh FILES array
- Update bionic-compat.js references to glibc-compat.js in docs (KO)
- Delete orphaned patches/bionic-compat.js

Ultraworked with Sisyphus
Co-authored-by: Sisyphus <sisyphus@opencode.ai>
Sync developer section with English README: 7-step Bionic flow to
10-step glibc flow, 7-step updater to 9-step, updated project
structure, verification table, and environment variables. Update
user-facing sections: storage overhead, requirements, CLI table,
and bonus section.

Ultraworked with Sisyphus
Co-authored-by: Sisyphus <sisyphus@opencode.ai>
Ultraworked with Sisyphus
Co-authored-by: Sisyphus <sisyphus@opencode.ai>
AidanPark and others added 24 commits March 1, 2026 23:44
…ll.sh to install/update flows, add Local LLM section to READMEs, clean up indentation, remove oa ide/opencode references, add termux-compat.h to bootstrap

- Fix code-server re-download by extracting version number from multi-field output
- Copy uninstall.sh during install and download during update (oa --uninstall)
- Add Local LLM on Android section to README.md and README.ko.md
- Normalize indentation in install.sh (step 8-9) and update-core.sh (step 9-10)
- Remove stale oa ide/oa opencode from install.sh footer
- Add patches/termux-compat.h to bootstrap.sh FILES array
- Update Additional Install Options, Status Check, and Update sections in READMEs
- Add interactive install/uninstall prompts for OpenCode, AI CLI tools
- Smart version-aware update for all components in oa --update
- Enhance oa --status with ttyd, dufs, AI CLI tools display
- Add UX progress messages for long-running install/update steps
- Update troubleshooting docs for glibc architecture

Ultraworked with Sisyphus

Co-authored-by: Sisyphus <sisyphus@openclaw.ai>
Ultraworked with Sisyphus

Co-authored-by: Sisyphus <sisyphus@openclaw.ai>
Widen diagrams to 53 display-width columns with consistent nesting.
Korean README uses English labels to avoid CJK width misalignment.

Ultraworked with Sisyphus
Co-authored-by: Sisyphus <noreply@anthropic.com>
- Add version comparison for OpenCode to skip unnecessary reinstall
- Prompt for missing components during update (ttyd, dufs, android-tools,
  clawhub, code-server, AI CLI tools, oh-my-opencode)
- Remove unreliable Phantom Process Killer detection (replace with info link)
- Fix misleading env block refresh message in setup-env.sh

Ultraworked with Sisyphus
Co-authored-by: Sisyphus <noreply@anthropic.com>
The npm package 'clawdhub' installs as 'clawdhub' binary, not 'clawhub'.
This caused the updater to always prompt for reinstallation.

Ultraworked with Sisyphus
Co-authored-by: Sisyphus <noreply@anthropic.com>
The npm package and binary are both named 'clawdhub', not 'clawhub'.
This inconsistency caused the updater to always report it as missing.

Ultraworked with Sisyphus
Co-authored-by: Sisyphus <noreply@anthropic.com>
Ultraworked with Sisyphus
Co-authored-by: Sisyphus <noreply@anthropic.com>
Extract lib.sh (colors, platform detection, config loading, prompts) as shared foundation. Split monolithic install-deps.sh and install-glibc-env.sh into focused L1/L2 scripts: install-infra-deps.sh (git only), install-glibc.sh (glibc-runner), install-nodejs.sh (Node.js wrapper), install-build-tools.sh (build tools). Remove install-ai-tools.sh (replaced by individual Y/n prompts in orchestrator).

Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-opencode)

Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>
Create platforms/openclaw/ with config.env (dependency declarations), env.sh (platform env vars), install.sh (npm + patches + clawdhub), update.sh (version check + sharp rebuild), uninstall.sh (7-step removal), status.sh (component status display), verify.sh (platform verification). Move patch-paths.sh, apply-patches.sh, build-sharp.sh to platforms/openclaw/patches/ with openclaw- prefix.

Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-opencode)

Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>
install.sh: 8-step flow with platform selection, config.env-driven L2 deps, individual L3 prompts. update-core.sh: 5-step flow downloading full tarball, platform delegation. uninstall.sh: delegates to platform uninstall script. oa.sh: sources lib.sh, detects platform for status. bootstrap.sh: simplified downloader.

Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-opencode)

Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>
check-env.sh: source lib.sh. setup-env.sh: platform-aware env block with detect_platform() and load_platform_config(). setup-paths.sh: source lib.sh, simplified. verify-install.sh: two-tier verification — orchestrator checks + platform verify.sh delegation.

Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-opencode)

Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>
Proof-of-concept platform plugin demonstrating the plugin architecture. Sets PLATFORM_NEEDS_GLIBC/NODEJS/BUILD_TOOLS=false, skipping all heavy L2 dependencies. Validates that orchestrator code needs zero changes to support a new platform.

Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-opencode)

Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>
Rewrite Technical Documentation: project structure tree, architecture diagram, 8-step install flow, 5-step update flow. Restructure Installed Components into 4 categories (Core Infrastructure / Platform Runtime / OpenClaw Platform / Optional Tools). Update Additional Install Options to reflect Y/n prompts for all optional tools.

Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-opencode)

Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>
Move Installed Components into Technical Documentation details block. Replace Step 1 (Developer Options, Stay Awake, charge limit), battery optimization, and Phantom Process Killer sections with links to the consolidated 'Keeping Processes Alive' guide. Remove redundant Additional Install Options, Status Check, Uninstall, and Why sections. Fix Optional Tools table: Bun and proot listed as OpenCode dependencies instead of independent items. Remove unused PLATFORM_NEEDS_PROOT from L2 table.

Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-opencode)

Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>
Reorder so users understand what the installer does before starting the setup process.

Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-opencode)

Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>
v22.14.0 does not include SQLITE_ENABLE_FTS5 in its bundled SQLite,
causing OpenClaw memory features to fail. v22.22.0 includes FTS5.

Also add version comparison to install-nodejs.sh so existing users
get upgraded via oa --update, and bump OA_VERSION to 1.0.4.

Closes #18

Co-authored-by: Sisyphus <sisyphus@opencode.ai>
Co-authored-by: Sisyphus <sisyphus@opencode.ai>
OpenCode does not discover plugins via PATH — it uses its internal
Bun to install plugins to ~/.cache/opencode/node_modules/. The
oh-my-opencode wrapper we create is never detected by OpenCode,
making the install and maintenance overhead pointless.

Co-authored-by: Sisyphus <sisyphus@opencode.ai>
Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 4 to 8.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@v4...v8)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: '8'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Mar 10, 2026

Labels

The following labels could not be found: ci. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant