chore(deps): update actions/download-artifact action to v5

[anaconda-renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/download-artifact	action	major	v4.3.0 -> v5.0.0

renovate update details

Field	Value
manager	github-actions
categories	ci
datasource	github-tags
depName	actions/download-artifact
depType¹	action
packageName	actions/download-artifact
sourceUrl	https://github.com/actions/download-artifact
updateType	major
versioning	regex:^v?(?<major>\d+)(.(?<minor>\d+).(?<patch>\d+))?$

¹ only available for some managers

---

Release Notes

actions/download-artifact (actions/download-artifact)

v5.0.0

Compare Source

What's Changed

• Update README.md by @​nebuk89 in https://github.com/actions/download-artifact/pull/407
• BREAKING fix: inconsistent path behavior for single artifact downloads by ID by @​GrantBirki in https://github.com/actions/download-artifact/pull/416

v5.0.0

🚨 Breaking Change

This release fixes an inconsistency in path behavior for single artifact downloads by ID. If you're downloading single artifacts by ID, the output path may change.

What Changed

Previously, single artifact downloads behaved differently depending on how you specified the artifact:

• By name: name: my-artifact → extracted to path/ (direct)
• By ID: artifact-ids: 12345 → extracted to path/my-artifact/ (nested)

Now both methods are consistent:

• By name: name: my-artifact → extracted to path/ (unchanged)
• By ID: artifact-ids: 12345 → extracted to path/ (fixed - now direct)

Migration Guide

✅ No Action Needed If:

• You download artifacts by name
• You download multiple artifacts by ID
• You already use merge-multiple: true as a workaround

⚠️ Action Required If:

You download single artifacts by ID and your workflows expect the nested directory structure.

Before v5 (nested structure):

- uses: actions/download-artifact@v4
  with:
    artifact-ids: 12345
    path: dist

##### Files were in: dist/my-artifact/

Where my-artifact is the name of the artifact you previously uploaded

To maintain old behavior (if needed):

- uses: actions/download-artifact@v5
  with:
    artifact-ids: 12345
    path: dist/my-artifact  # Explicitly specify the nested path

New Contributors

• @​nebuk89 made their first contribution in https://github.com/actions/download-artifact/pull/407

Full Changelog: actions/download-artifact@v4...v5.0.0

---

Configuration

📅 Schedule: Branch creation - "every weekday" in timezone UTC, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.