From 510e638175462df2084225f9c0801cafb0fe9365 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 25 Sep 2026 23:41:21 +0000
Subject: [PATCH] build(deps): bump actions/download-artifact from 4 to 8

Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 4 to 8.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](https://github.com/actions/download-artifact/compare/v4...v8)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: '8'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/build-engines.yml | 4 ++--
 .github/workflows/ci.yml            | 4 ++--
 .github/workflows/nightly.yml       | 4 ++--
 .github/workflows/publish-npm.yml   | 4 ++--
 4 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/.github/workflows/build-engines.yml b/.github/workflows/build-engines.yml
index 9ebdd1fb..39dc6c69 100644
--- a/.github/workflows/build-engines.yml
+++ b/.github/workflows/build-engines.yml
@@ -109,7 +109,7 @@ jobs:
           - { os: windows-2025,     platform: win32-x64 }
     runs-on: ${{ matrix.target.os }}
     steps:
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v8
         with: { name: generated, path: gen }
       - name: restore the engines built from these rules last time
         id: restore
@@ -204,7 +204,7 @@ jobs:
           - { os: macos-15-intel, arch: x86_64, platform: darwin-x64 }
     runs-on: ${{ matrix.target.os }}
     steps:
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v8
         with: { name: generated, path: gen }
       - name: restore the engines built from these rules last time
         id: restore
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index e0920025..f899d039 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -476,9 +476,9 @@ jobs:
       - uses: actions/setup-python@v5
         with:
           python-version: '3.12'
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v8
         with: { name: 'engines-${{ matrix.target.platform }}', path: artifacts/engines }
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v8
         with: { name: code-graph-tgz, path: artifacts/tgz }
       - name: installed from the tarballs, no Soufflé, every language, every verb
         shell: bash
diff --git a/.github/workflows/nightly.yml b/.github/workflows/nightly.yml
index 4a089ff8..bc81e0fb 100644
--- a/.github/workflows/nightly.yml
+++ b/.github/workflows/nightly.yml
@@ -66,7 +66,7 @@ jobs:
         with:
           node-version: '22'
       - run: npm install --no-audit --no-fund
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v8
         with: { pattern: engines-*, path: artifacts }
 
       - name: every language, installed from the tarballs, no Soufflé
@@ -134,7 +134,7 @@ jobs:
           npm install --no-audit --no-fund
 
       - if: steps.v.outputs.skip == 'false'
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v8
         with: { pattern: engines-*, path: artifacts }
 
       # Engines first: the root package pins them at its own version.
diff --git a/.github/workflows/publish-npm.yml b/.github/workflows/publish-npm.yml
index 25ce21ec..70613399 100644
--- a/.github/workflows/publish-npm.yml
+++ b/.github/workflows/publish-npm.yml
@@ -102,13 +102,13 @@ jobs:
           fi
           echo "id=$run" >> "$GITHUB_OUTPUT"
           echo "shipping the build of CI run $run ($GITHUB_SERVER_URL/$GITHUB_REPOSITORY/actions/runs/$run)"
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v8
         with:
           pattern: engines-*
           path: artifacts
           run-id: ${{ steps.run.outputs.id }}
           github-token: ${{ github.token }}
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v8
         with:
           name: code-graph-tgz
           path: artifacts/tgz