[dependabot]

Summary

Update actions/download-artifact from 8.0.1 to 8.0.2 so CI and release downloads use the updated artifact client.

Changes

• Replace existing download-artifact pins with the verified v8.0.2 commit and matching version comments.
• Preserve artifact names, IDs, patterns, merge settings, and extraction paths.

Testing

• Reviewed the complete workflow diff, upstream source changes, and official tag-to-commit match.
• Native and packaged-artifact consumers passed CI.
• Reran the Windows test shard after it reached application tests and timed out. Required checks must pass before merge.
• The optional runner-inventory comparison fails on a duplicate JUnit test identity already present on main.

Risk and rollout

Patch update within the existing action major version. Artifact selection and extraction behavior remain unchanged. No rollout steps are required.

Public disclosure review

• No customer, partner, prospect, or user identities, data, or identifying details are included.
• No credentials, personal data, private source, scan findings, or nonpublic links or tickets are included.
• I reviewed the branch name, title, description, commits, changes, comments, logs, screenshots, attachments, and links for public disclosure.

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
🔒 Security Review	✅ Completed 2026-10-14T16:59:16.016210Z	fec58f3	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[mldangelo-oai]

Verified the official v8.0.2 commit and reviewed all workflow changes and upstream artifact-client changes. Artifact selection and extraction inputs are unchanged. Merge remains subject to the required Windows check rerun.