From db352896c0a104938a546ef606594536219c86f3 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 8 Sep 2026 04:47:26 +0000
Subject: [PATCH] chore(deps): bump actions/upload-artifact from 4 to 7

Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4 to 7.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v4...v7)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/app-platform-phase5-certification.yml  | 4 ++--
 .github/workflows/app-platform-phase6-certification.yml  | 4 ++--
 .github/workflows/app-platform-track-a-certification.yml | 4 ++--
 .github/workflows/ci.yml                                 | 2 +-
 .github/workflows/release.yml                            | 2 +-
 5 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/.github/workflows/app-platform-phase5-certification.yml b/.github/workflows/app-platform-phase5-certification.yml
index 4b266d4f..b9df59f2 100644
--- a/.github/workflows/app-platform-phase5-certification.yml
+++ b/.github/workflows/app-platform-phase5-certification.yml
@@ -88,7 +88,7 @@ jobs:
 
       - name: Upload safe certification evidence
         if: always()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: app-platform-phase5-safe-${{ github.run_id }}-${{ github.run_attempt }}
           path: ${{ env.DEFT_APP_PLATFORM_EVIDENCE_DIR }}/safe
@@ -98,7 +98,7 @@ jobs:
 
       - name: Upload exact candidate image archive
         if: success()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: app-platform-phase5-image-${{ github.run_id }}-${{ github.run_attempt }}
           path: ${{ env.DEFT_APP_PLATFORM_EVIDENCE_DIR }}/candidate-image.tar.zst
diff --git a/.github/workflows/app-platform-phase6-certification.yml b/.github/workflows/app-platform-phase6-certification.yml
index 892293fe..960170c6 100644
--- a/.github/workflows/app-platform-phase6-certification.yml
+++ b/.github/workflows/app-platform-phase6-certification.yml
@@ -113,7 +113,7 @@ jobs:
 
       - name: Upload bounded safe certification evidence
         if: always()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: app-platform-phase6-safe-${{ github.run_id }}-${{ github.run_attempt }}
           path: ${{ env.EVIDENCE_DIR }}/safe
@@ -123,7 +123,7 @@ jobs:
 
       - name: Upload exact candidate image archive
         if: success()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: app-platform-phase6-image-${{ github.run_id }}-${{ github.run_attempt }}
           path: ${{ env.EVIDENCE_DIR }}/candidate-image.tar.zst
diff --git a/.github/workflows/app-platform-track-a-certification.yml b/.github/workflows/app-platform-track-a-certification.yml
index 1feef3d7..46712b5e 100644
--- a/.github/workflows/app-platform-track-a-certification.yml
+++ b/.github/workflows/app-platform-track-a-certification.yml
@@ -122,7 +122,7 @@ jobs:
 
       - name: Upload bounded safe certification evidence
         if: always()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: app-platform-track-a-safe-${{ github.run_id }}-${{ github.run_attempt }}
           path: ${{ env.EVIDENCE_DIR }}/safe
@@ -132,7 +132,7 @@ jobs:
 
       - name: Upload exact candidate image archive
         if: success()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: app-platform-track-a-image-${{ github.run_id }}-${{ github.run_attempt }}
           path: ${{ env.EVIDENCE_DIR }}/candidate-image.tar.zst
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index bc09182b..6518caad 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -199,7 +199,7 @@ jobs:
         run: pnpm test:hermes-employee-release-gate
       - name: Retain certification evidence
         if: always()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: hermes-employee-release-gate
           path: |
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 9a97bbef..12c2c14d 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -151,7 +151,7 @@ jobs:
           DEFT_RELEASE_COMMIT: ${{ steps.release.outputs.sha }}
         run: pnpm test:hermes-employee-release-gate
       - name: Publish certification evidence
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: hermes-employee-release-certification
           path: |