build(deps): bump dawidd6/action-download-artifact from 18 to 19

[dependabot]

Bumps dawidd6/action-download-artifact from 18 to 19.

Release notes

Sourced from dawidd6/action-download-artifact's releases.

v19

What's Changed

• build(deps): bump fast-xml-parser from 5.4.1 to 5.5.6 by @​dependabot[bot] in dawidd6/action-download-artifact#385
• node_modules: update by @​dawidd6 in dawidd6/action-download-artifact#386

Full Changelog: dawidd6/action-download-artifact@v18...v19

Commits

• 8a33849 node_modules: update (#386)
• 720df5c build(deps): bump fast-xml-parser from 5.4.1 to 5.5.6 (#385)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[greptile-apps]

Greptile Summary

This PR bumps the dawidd6/action-download-artifact GitHub Action from v18 to v19 in the CI workflow. The only downstream change in v19 is a security-motivated upgrade of the fast-xml-parser dependency (5.4.1 → 5.5.6) and a general node_modules refresh — there are no API or behavioral changes that affect how the action is used in this workflow.

• Single-line change on line 108 of .github/workflows/nodejs.yml: v18 → v19
• The action is still referenced by a mutable version tag (v19) rather than a pinned commit SHA; this is the existing convention throughout the file and is not introduced by this PR
• No functional workflow logic is altered

Confidence Score: 5/5

• This PR is safe to merge — it is a routine, minimal Dependabot version bump with no behavioral changes.
• The change is a single-line version tag update generated by Dependabot. v19 contains only a security patch for a transitive dependency and a node_modules refresh, with no API changes. There is no risk to the workflow's logic or outputs.
• No files require special attention.

Important Files Changed

Filename	Overview
.github/workflows/nodejs.yml	Bumps dawidd6/action-download-artifact from v18 to v19 on line 108; v19 includes a fast-xml-parser security patch and a node_modules update — no behavioral changes to the workflow.

Sequence Diagram

sequenceDiagram
    participant GH as GitHub Actions
    participant DL as dawidd6/action-download-artifact@v19
    participant AWSR as ActivityWatch/aw-server-rust

    Note over GH: test job (aw-server-rust, master)
    GH->>DL: Download artifact request
    DL->>AWSR: Query workflow runs (build.yml, branch=master, event=push)
    AWSR-->>DL: Return artifact list (binaries-Linux)
    DL-->>GH: Extract artifact to ./aw-server-rust
    Note over GH: Continues with install & run steps

Loading

_{Reviews (1): Last reviewed commit: "build(deps): bump dawidd6/action-downloa..." | Re-trigger Greptile}