Bump version of workflow in fuzz file generation
What changed, and why it matters
This commit updates a single version number in a shell script that auto-generates GitHub Actions workflow files. It changes the referenced GitHub action 'actions/download-artifact' from version 4 to version 5 so newly generated workflows match a version already bumped elsewhere by an automated tool. There is no code change affecting the Rust Bitcoin library, its users, or any runtime behavior.
No security action needed. Treat as routine CI maintenance.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The diff in fuzz/generate-files.sh changes the generated YAML line ‘- uses: actions/download-artifact@v4’ to ‘- uses: actions/download-artifact@v5’. This is a consistency follow-up to an earlier automated bump (commit 489118f0b79fd9e2e78c79db1e5876814e132431). It only affects the CI fuzzing workflow template and has no impact on the crate’s source code, APIs, or compiled artifacts.
Changed components
fuzz/generate-files.shInspect captured patch +1 / −1
diff --git a/fuzz/generate-files.sh b/fuzz/generate-files.sh
index 1d509bc5..c5575030 100755
--- a/fuzz/generate-files.sh
+++ b/fuzz/generate-files.sh
@@ -102,7 +102,7 @@ $(for name in $(listTargetNames); do echo " $name,"; done)
runs-on: ubuntu-24.04
steps:
- uses: actions/checkout@v4
- - uses: actions/download-artifact@v4
+ - uses: actions/download-artifact@v5
- name: Display structure of downloaded files
run: ls -R
- run: find executed_* -type f -exec cat {} + | sort > executed
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.