[renovate-bot]

This PR contains the following updates:

Package	Type	Update	Change
actions/download-artifact (changelog)	action	digest	3e5f45b → 9000827

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

Important

Review skipped

Review was skipped as selected files did not have any reviewable changes.

Run configuration

• Source mode: Auto
• Repository: jbangdev/jbang
• Branch: main
• File: .coderabbit.yaml
• Commit: cce144b
• Layers: Repository YAML
• Review profile: CHILL
• Plan: Advanced
• Run ID: 01580cde-3040-47f8-972b-d846369f390e

Commits

Reviewing files that changed from the base of the PR and between 367c227 and 5ee7460.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• Trigger review

No actionable comments were generated in the recent review.

Walkthrough

The GitHub Actions workflows now pin actions/download-artifact to updated commit SHAs. The action version annotations, artifact selections, paths, and other download settings remain unchanged.

Changes: Artifact download action pins

Layer / File(s)	Summary
Update workflow action pins .github/workflows/main-build.yml, .github/workflows/publish-packages.yml, .github/workflows/publish-pr-build.yml, .github/workflows/report.yml, .github/workflows/step-ci-build.yml, .github/workflows/tag-and-release.yml	Artifact-download steps use updated actions/download-artifact commit SHAs. The v8 annotations and download settings remain unchanged.

Estimated code review effort: 1 (Trivial) | ~5 minutes

Change: Other

Suggested reviewers: maxandersen

Merge Risk: Minimal · previous review 367c2

The workflow pin updates are mergeable with no identified functional or operational regression.

Pre-merge checks: 4

Check name	Status	Explanation
Description Check		Check skipped - CodeRabbit’s high-level summary is enabled.
Title check		The title clearly and concisely identifies the dependency digest update for actions/download-artifact, which matches the main change.
Linked Issues check		Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check		Check skipped because no linked issues were found for this pull request.

Finishing Touches

🧪 Generate unit tests (beta)

• Create a new PR

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

• X
• Mastodon
• Reddit
• LinkedIn

Recent review info

Run configuration

• Source mode: Auto
• Repository: jbangdev/jbang
• Branch: main
• File: .coderabbit.yaml
• Commit: a891489
• Layers: Repository YAML
• Review profile: CHILL
• Plan: Advanced
• Run ID: 8c21ab21-67d7-466d-a53b-11d748e31ac2

Commits

Reviewing files that changed from the base of the PR and between a891489 and 367c227.

Files selected for processing: 6

• .github/workflows/main-build.yml
• .github/workflows/publish-packages.yml
• .github/workflows/publish-pr-build.yml
• .github/workflows/report.yml
• .github/workflows/step-ci-build.yml
• .github/workflows/tag-and-release.yml

Included review availability: This review used your included allowance. Your plan provides up to 4 included reviews per hour; 2 remain after this review.