Update actions/upload-artifact action to v4.3.4

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/upload-artifact	action	patch	v4.3.3 -> v4.3.4

---

Release Notes

actions/upload-artifact (actions/upload-artifact)

v4.3.4

Compare Source

What's Changed

• Update @​actions/artifact version, bump dependencies by @​robherley in https://github.com/actions/upload-artifact/pull/584

Full Changelog: actions/upload-artifact@v4.3.3...v4.3.4

---

Configuration

📅 Schedule: Branch creation - "* 0-4 * * 3" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[github-actions]

[puLL-Merge] - actions/[email protected]

Description

This PR updates the @actions/artifact dependency from version 2.1.6 to 2.1.8 and makes corresponding changes to the codebase. It also includes some refactoring and improvements in the artifact download and extraction process.

Changes

Changes

1. .licenses/npm/@actions/artifact.dep.yml:

   • Updated the version of @actions/artifact from 2.1.6 to 2.1.8.

2. dist/merge/index.js:

   • Removed unused imports for stream, fs, and path.
   • Simplified the streamExtractExternal function by using unzip-stream.Extract instead of a custom implementation.
   • Removed error handling for 'Malformed extraction path' errors.
   • Updated the isGhes function to separately check for .GHE.COM and .LOCALHOST domains.
   • Added new utility functions for handling HTTP headers and parsing metadata.
   • Improved the bytesMatch function for integrity checking.
   • Updated the parseMetadata function to be more robust and efficient.
   • Added new functions getStrongestMetadata, filterMetadataListByAlgorithm, and compareBase64Mixed for better metadata handling.

3. dist/upload/index.js:

   • Similar changes as in dist/merge/index.js.

4. package.json:

   • Updated the version of the upload-artifact package from 4.3.3 to 4.3.4.
   • Updated the @actions/artifact dependency to version 2.1.8.

Possible Issues

No major non-security issues are apparent in this change.

Security Hotspots

There are no obvious security vulnerabilities introduced by this change. The improvements in metadata parsing and integrity checking could potentially enhance security, but no specific vulnerabilities are being addressed.