Skip to content

Bump actions/upload-artifact from 6 to 7 and actions/download-artifact from 7 to 8#272

Merged
dav3r merged 6 commits into
developfrom
dependabot/github_actions/actions/upload-artifact-7
Mar 24, 2026
Merged

Bump actions/upload-artifact from 6 to 7 and actions/download-artifact from 7 to 8#272
dav3r merged 6 commits into
developfrom
dependabot/github_actions/actions/upload-artifact-7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Mar 2, 2026

Copy link
Copy Markdown
Contributor

Bumps actions/upload-artifact from 6 to 7 and actions/download-artifact from 7 to 8.

Release notes

Sourced from actions/upload-artifact's releases.

v7.0.0

v7 What's new

Direct Uploads

Adds support for uploading single files directly (unzipped). Callers can set the new archive parameter to false to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The name parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.

ESM

To support new versions of the @actions/* packages, we've upgraded the package to ESM.

What's Changed

New Contributors

Full Changelog: actions/upload-artifact@v6...v7.0.0

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Note that this upgrade allows us to start using the archive: false attribute, which avoids double-zipping the (already gzipped) artifact.

Note that this PR includes the changes from #274.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 6 to 7.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@v6...v7)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github-actions Pull requests that update GitHub Actions code labels Mar 2, 2026
@dependabot dependabot Bot requested review from dav3r, felddy, jsf9k and mcdonnnj as code owners March 2, 2026 19:37
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github-actions Pull requests that update GitHub Actions code labels Mar 2, 2026
@jsf9k jsf9k self-assigned this Mar 2, 2026
@jsf9k jsf9k added the kraken 🐙 This pull request is ready to merge during the next Lineage Kraken release label Mar 2, 2026
@jsf9k jsf9k moved this to In Progress in Next Kraken Mar 2, 2026
@jsf9k jsf9k moved this from In progress to Review in progress in Skeleton Maintenance Mar 3, 2026
@github-project-automation github-project-automation Bot moved this from Review in progress to Reviewer approved in Skeleton Maintenance Mar 3, 2026
Comment thread .github/workflows/build.yml Outdated
@github-project-automation github-project-automation Bot moved this from Reviewer approved to Review in progress in Skeleton Maintenance Mar 4, 2026
@github-project-automation github-project-automation Bot moved this from Review in progress to Reviewer approved in Skeleton Maintenance Mar 5, 2026
@jsf9k jsf9k force-pushed the dependabot/github_actions/actions/upload-artifact-7 branch from 4d4de2c to 9452ed4 Compare March 5, 2026 18:21
Also remove the name attribute as it is not used when archive is
false.  Note that this requires updating the name of the artifact in a
few places where we download it.

Co-authored-by: Nick M <50747025+mcdonnnj@users.noreply.github.com>
@jsf9k jsf9k force-pushed the dependabot/github_actions/actions/upload-artifact-7 branch from 9452ed4 to f8f8a72 Compare March 5, 2026 18:35
jsf9k added 2 commits March 5, 2026 14:05
actions/upload-artifact@v7 requires actions/download-artifact@v8.
@jsf9k jsf9k force-pushed the dependabot/github_actions/actions/upload-artifact-7 branch from 3f3eb0a to 18b9e40 Compare March 5, 2026 19:05

@mcdonnnj mcdonnnj left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

One item of feedback for your consideration. Also please update the PR title and description to mention that actions/download-artifact has been bumped from v7 to v8 and this PR includes #274 now.

Comment thread .github/workflows/build.yml Outdated
@jsf9k jsf9k changed the title Bump actions/upload-artifact from 6 to 7 Bump actions/upload-artifact from 6 to 7 and actions/download-artifact from 7 to 8 Mar 9, 2026
@jsf9k

jsf9k commented Mar 9, 2026

Copy link
Copy Markdown
Member

Also please update the PR title and description to mention that actions/download-artifact has been bumped from v7 to v8 and this PR includes #274 now.

Please see the updated PR title and description.

We no longer need this directory now that we are uploading
image.tar.gz directly, i.e., instead of the entire dist directory.

Co-authored-by: Nick M <50747025+mcdonnnj@users.noreply.github.com>
@dav3r dav3r merged commit ec989b5 into develop Mar 24, 2026
25 checks passed
@dav3r dav3r deleted the dependabot/github_actions/actions/upload-artifact-7 branch March 24, 2026 15:38
@github-project-automation github-project-automation Bot moved this from Reviewer approved to Done in Skeleton Maintenance Mar 24, 2026
@github-project-automation github-project-automation Bot moved this from In Progress to Done in Next Kraken Mar 24, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github-actions Pull requests that update GitHub Actions code kraken 🐙 This pull request is ready to merge during the next Lineage Kraken release

Projects

Status: Done

Development

Successfully merging this pull request may close these issues.

3 participants