feat: use download-artifact instead of manually downloading it

This should hopefully work on private repos too!

.forgejo/workflows/check.yml

@@ -14,6 +14,14 @@ jobs:
           nix --version
           # shellcheck disable=SC2016
           nix build --print-build-logs '.#checks.x86_64-linux.${{ matrix.check }}'
+  check-renovaterc:
+    runs-on: nixos
+    steps:
+      - uses: "https://git.salame.cl/actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683" # v4
+      - name: Validate renovaterc.json
+        run: |
+          nix --version
+          nix shell nixpkgs#renovate --command renovate-config-validator
   report-size:
     runs-on: nixos
     needs: check
@@ -27,14 +35,13 @@ jobs:
           comment-on-pr: ${{ github.ref_name != 'main' }}
           # Generate artifacts on main (to speed up comparisons)
           # generate-artifact: ${{ github.ref_name == 'main' }}
-          # Always generate artifacts for testing purposes
+          # For testing always generate artifacts
           generate-artifact: 'true'
+          github-token: ${{ secrets.ARTIFACT_TOKEN }}
           # Generate comparisons to main
           do-comparison: 'true'
           # This job's name (so we can find the artifacts)
           job-name: report-size
-          # A token is required to download a previous run's artifact
-          github-token: ${{ secrets.FULL_PERM_TEST }}
   report-download-check:
     runs-on: nixos
     needs: report-size

.forgejo/workflows/renovate.yml

@@ -1,14 +0,0 @@
-on:
-  push:
-    paths:
-      # only run if the renovate config changed
-      - renovate.json
-jobs:
-  check-renovaterc:
-    runs-on: nixos
-    steps:
-      - uses: "https://git.salame.cl/actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683" # v4
-      - name: Validate renovaterc.json
-        run: |
-          nix --version
-          nix shell nixpkgs#renovate --command renovate-config-validator

action.yml

@@ -144,14 +144,14 @@ runs:
 
         echo "run-id=$run_id" >> "$GITHUB_OUTPUT"
         log Would try to download "$ARTIFACT_NAME" from "$run_id"
-    - name: Download previous report
+    # - name: Download previous report
-      uses: https://git.salame.cl/actions/download-artifact@d8d0a99033603453ad2255e58720b460a0555e1e # v4
+    #   uses: https://git.salame.cl/actions/download-artifact@d8d0a99033603453ad2255e58720b460a0555e1e # v4
-      # Ensure the previous step succeeded
+    #   # Ensure the previous step succeeded
-      if: steps.previous-report.outcome == 'success'
+    #   if: steps.previous-report.outcome == 'success'
-      with:
+    #   with:
-        name: ${{ inputs.artifact-name }}
+    #     name: ${{ inputs.artifact-name }}
-        github-token: ${{ inputs.github-token }}
+    #     github-token: ${{ inputs.github-token }}
-        run-id: ${{ steps.previous-report.outputs.run-id }}
+    #     run-id: ${{ steps.previous-report.outputs.run-id }}
     - name: Create report
       if: inputs.comment-on-pr == 'true' || inputs.generate-artifact == 'true'
       env: