Bump dawidd6/action-download-artifact from 20 to 21

[dependabot]

Bumps dawidd6/action-download-artifact from 20 to 21.

Release notes

Sourced from dawidd6/action-download-artifact's releases.

v21

What's Changed

• build(deps): bump @​actions/github from 9.0.0 to 9.1.0 by @​dependabot[bot] in dawidd6/action-download-artifact#396
• build(deps): bump filesize from 11.0.15 to 11.0.16 by @​dependabot[bot] in dawidd6/action-download-artifact#399
• build(deps): bump fast-xml-parser from 5.5.7 to 5.7.1 by @​dependabot[bot] in dawidd6/action-download-artifact#402
• build(deps): bump @​actions/github from 9.1.0 to 9.1.1 by @​dependabot[bot] in dawidd6/action-download-artifact#400
• build(deps): bump @​actions/core from 3.0.0 to 3.0.1 by @​dependabot[bot] in dawidd6/action-download-artifact#401
• build(deps): bump filesize from 11.0.16 to 11.0.17 by @​dependabot[bot] in dawidd6/action-download-artifact#404
• Download artifacts in creation order by @​matejdro in dawidd6/action-download-artifact#398
• node_modules: update by @​dawidd6 in dawidd6/action-download-artifact#405

New Contributors

• @​matejdro made their first contribution in dawidd6/action-download-artifact#398

Full Changelog: dawidd6/action-download-artifact@v20...v21

Commits

• b6e2e70 node_modules: update (#405)
• 1708cb3 Download artifacts in creation order (#398)
• 00b585a build(deps): bump filesize from 11.0.16 to 11.0.17 (#404)
• 0414c42 build(deps): bump @​actions/core from 3.0.0 to 3.0.1 (#401)
• c802aad build(deps): bump @​actions/github from 9.1.0 to 9.1.1 (#400)
• ef06691 build(deps): bump fast-xml-parser from 5.5.7 to 5.7.1 (#402)
• 026702e build(deps): bump filesize from 11.0.15 to 11.0.16 (#399)
• 09d0677 build(deps): bump @​actions/github from 9.0.0 to 9.1.0 (#396)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

Dependency Review

The following issues were found:

• ✅ 0 vulnerable package(s)
• ✅ 0 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ⚠️ 1 package(s) with unknown licenses.

See the Details below.

Snapshot Warnings

⚠️: No snapshots were found for the head SHA 221843b.

Ensure that dependencies are being submitted on PR branches and consider enabling retry-on-snapshot-warnings. See the documentation for more information and troubleshooting advice.

License Issues

.github/workflows/process-test-results.yml

Package	Version	License	Issue Type
dawidd6/action-download-artifact	21.*.*	Null	Unknown License

Allowed Licenses:

MIT, Apache-2.0, BSD-2-Clause, BSD-3-Clause, ISC, MPL-2.0, LGPL-2.1-only, EPL-2.0, EPL-1.0

Excluded from license check:

pkg:maven/org.eclipse.angus/jakarta.mail@2.0.5?type=jar, pkg:maven/jakarta.ws.rs:jakarta.ws.rs-api@4.0.0?type=jar

OpenSSF Scorecard

Package	Version	Score	Details
actions/dawidd6/action-download-artifact	21.*.*	🟢 4.5	Details Check Score Reason Code-Review ⚠️ 0 Found 0/13 approved changesets -- score normalized to 0 Maintained 🟢 10 30 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10 Packaging ⚠️ -1 packaging workflow not detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Security-Policy ⚠️ 0 security policy file not detected License 🟢 10 license file detected Branch-Protection ⚠️ 0 branch protection not enabled on development/release branches Signed-Releases ⚠️ -1 no releases found Binary-Artifacts 🟢 10 no binaries found in the repo Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0 SAST 🟢 10 SAST tool is run on all commits Fuzzing ⚠️ 0 project is not fuzzed

Scanned Files

• .github/workflows/process-test-results.yml

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ All tests successful. No failed tests found.

@@          Coverage Diff           @@
##             main   #1712   +/-   ##
======================================
- Coverage      78%     78%   -0%     
  Complexity    130     130           
======================================
  Files         157     157           
  Lines        7799    7799           
  Branches      715     715           
======================================
- Hits         6019    6009   -10     
- Misses       1364    1377   +13     
+ Partials      416     413    -3     

see 1 file with indirect coverage changes

🚀 New features to boost your workflow:

• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.