From fdb9ab1bf3ef2bc1117c30034d7356f3afdff825 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 27 Sep 2026 20:44:47 +0000 Subject: [PATCH] chore(deps): bump actions/upload-artifact from 6.0.0 to 7.0.1 Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 6.0.0 to 7.0.1. - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/v6...v7.0.1) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/ai-eval.yml | 4 ++-- .github/workflows/backup-restore-drill.yml | 2 +- .github/workflows/capacity-test.yml | 2 +- .github/workflows/ci.yml | 8 ++++---- .github/workflows/cleanup.yml | 2 +- .github/workflows/deploy-rollback.yml | 2 +- .github/workflows/frontend-quality.yml | 10 +++++----- .github/workflows/load-test.yml | 4 ++-- .github/workflows/post-deploy-smoke.yml | 2 +- .github/workflows/release.yml | 8 ++++---- 10 files changed, 22 insertions(+), 22 deletions(-) diff --git a/.github/workflows/ai-eval.yml b/.github/workflows/ai-eval.yml index 9abb5372cd..8c015785ea 100644 --- a/.github/workflows/ai-eval.yml +++ b/.github/workflows/ai-eval.yml @@ -100,7 +100,7 @@ jobs: run: make ai-eval-full - name: Upload JUnit report if: always() - uses: actions/upload-artifact@v6 + uses: actions/upload-artifact@v7.0.1 with: name: ai-eval-junit path: ai-eval.junit.xml @@ -134,7 +134,7 @@ jobs: run: make ai-eval-judged - name: Upload judged JUnit report if: steps.gate.outputs.judge == 'enabled' - uses: actions/upload-artifact@v6 + uses: actions/upload-artifact@v7.0.1 with: name: ai-eval-judged-junit path: ai-eval.judged.junit.xml diff --git a/.github/workflows/backup-restore-drill.yml b/.github/workflows/backup-restore-drill.yml index 1967b15e3e..f5c7d886f5 100644 --- a/.github/workflows/backup-restore-drill.yml +++ b/.github/workflows/backup-restore-drill.yml @@ -417,7 +417,7 @@ jobs: - name: Upload drill evidence if: always() - uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6 + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 with: name: restore-drill-${{ github.run_id }}-${{ github.run_attempt }} path: | diff --git a/.github/workflows/capacity-test.yml b/.github/workflows/capacity-test.yml index 052e46e80b..0b0c40d629 100644 --- a/.github/workflows/capacity-test.yml +++ b/.github/workflows/capacity-test.yml @@ -266,7 +266,7 @@ jobs: - name: Upload k6 summaries if: always() - uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6 + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 with: name: capacity-${{ inputs.profile }}-${{ github.run_number }} path: | diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index be3ae426e5..7a5a4bcc0a 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -140,7 +140,7 @@ jobs: go test -race -coverprofile=shard/coverage.out -covermode=atomic -json "${packages[@]}" | tee shard/test-events.json - name: Upload raw shard evidence if: always() - uses: actions/upload-artifact@v6 + uses: actions/upload-artifact@v7.0.1 with: name: backend-test-${{ matrix.shard }} path: shard/ @@ -182,7 +182,7 @@ jobs: - name: Upload coverage if: always() - uses: actions/upload-artifact@v6 + uses: actions/upload-artifact@v7.0.1 with: name: backend-coverage if-no-files-found: error @@ -353,7 +353,7 @@ jobs: --reporter=default --reporter=blob - name: Upload raw shard evidence if: always() - uses: actions/upload-artifact@v6 + uses: actions/upload-artifact@v7.0.1 with: name: frontend-test-${{ matrix.shard }} path: web/.vitest-reports/ @@ -405,7 +405,7 @@ jobs: - name: Upload coverage if: always() - uses: actions/upload-artifact@v6 + uses: actions/upload-artifact@v7.0.1 with: name: frontend-coverage path: web/coverage/ diff --git a/.github/workflows/cleanup.yml b/.github/workflows/cleanup.yml index 1cfaa5d459..bed7f1cd15 100644 --- a/.github/workflows/cleanup.yml +++ b/.github/workflows/cleanup.yml @@ -49,7 +49,7 @@ jobs: run: node scripts/package-retention.mjs - name: Upload retention report if: always() - uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6 + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 with: name: package-retention-report path: | diff --git a/.github/workflows/deploy-rollback.yml b/.github/workflows/deploy-rollback.yml index 73ad008073..1321d2d5fc 100644 --- a/.github/workflows/deploy-rollback.yml +++ b/.github/workflows/deploy-rollback.yml @@ -155,7 +155,7 @@ jobs: - name: Upload decision if: always() - uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6 + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 with: name: rollback-decision-${{ github.run_number }} path: decision.json diff --git a/.github/workflows/frontend-quality.yml b/.github/workflows/frontend-quality.yml index 14c620d8aa..a38ef4e0a4 100644 --- a/.github/workflows/frontend-quality.yml +++ b/.github/workflows/frontend-quality.yml @@ -83,7 +83,7 @@ jobs: - run: npm run e2e:build env: E2E_MOCKS: '1' - - uses: actions/upload-artifact@v6 + - uses: actions/upload-artifact@v7.0.1 with: name: e2e-app path: web/e2e/.app-dist/ @@ -125,7 +125,7 @@ jobs: run: npm run e2e:${{ matrix.suite }} -- --shard=${{ matrix.shard }} - name: Upload Chromium failure evidence if: always() - uses: actions/upload-artifact@v6 + uses: actions/upload-artifact@v7.0.1 with: name: chromium-${{ matrix.name }}-report if-no-files-found: ignore @@ -177,7 +177,7 @@ jobs: run: npm run e2e -- --project=${{ matrix.browser }}-smoke - name: Upload engine failure evidence if: always() - uses: actions/upload-artifact@v6 + uses: actions/upload-artifact@v7.0.1 with: name: ${{ matrix.browser }}-smoke-report if-no-files-found: ignore @@ -214,7 +214,7 @@ jobs: run: npm run e2e:visual -- --shard=${{ matrix.shard }}/4 --workers=2 - name: Upload visual diffs if: always() - uses: actions/upload-artifact@v6 + uses: actions/upload-artifact@v7.0.1 with: name: visual-regression-report-${{ matrix.shard }} if-no-files-found: ignore @@ -283,7 +283,7 @@ jobs: rm -rf test-results playwright-report blob-report - name: Upload sanitized deployed smoke status if: always() - uses: actions/upload-artifact@v6 + uses: actions/upload-artifact@v7.0.1 with: name: authenticated-production-smoke-status if-no-files-found: error diff --git a/.github/workflows/load-test.yml b/.github/workflows/load-test.yml index 3840b0780f..0c9d54b81b 100644 --- a/.github/workflows/load-test.yml +++ b/.github/workflows/load-test.yml @@ -91,7 +91,7 @@ jobs: - name: Upload k6 summary if: always() - uses: actions/upload-artifact@v6 + uses: actions/upload-artifact@v7.0.1 with: name: k6-summary-${{ github.run_number }} path: tests/k6/summary.json @@ -104,7 +104,7 @@ jobs: - name: Upload API logs if: failure() - uses: actions/upload-artifact@v6 + uses: actions/upload-artifact@v7.0.1 with: name: api-logs-${{ github.run_number }} path: api.log diff --git a/.github/workflows/post-deploy-smoke.yml b/.github/workflows/post-deploy-smoke.yml index 70dd7f5b26..3929b58556 100644 --- a/.github/workflows/post-deploy-smoke.yml +++ b/.github/workflows/post-deploy-smoke.yml @@ -115,7 +115,7 @@ jobs: - name: Upload smoke report if: always() - uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6 + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 with: name: smoke-report-${{ github.run_number }} path: smoke-report.json diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 6a633b69a7..396b0205a7 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -314,7 +314,7 @@ jobs: timeout: 30m - name: Upload vulnerability scan - uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6 + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 with: name: vuln-${{ matrix.image }}-${{ needs.version.outputs.version }} path: vuln-${{ matrix.image }}.json @@ -324,7 +324,7 @@ jobs: # version, so legs cannot collide and a publish job cannot pick up # another image's bytes. - name: Upload the promotable image archive - uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6 + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 with: name: image-${{ matrix.image }}-${{ needs.version.outputs.version }} path: | @@ -405,7 +405,7 @@ jobs: - name: Upload vulnerability status if: always() - uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6 + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 with: name: vulnerability-status-${{ needs.version.outputs.version }} path: vulnerability-status.md @@ -606,7 +606,7 @@ jobs: echo "✅ Attested CycloneDX SBOM to ${PRIMARY}@${DIGEST}" - name: Upload SBOM artifacts - uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6 + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 with: name: sbom-${{ matrix.image }}-${{ needs.version.outputs.version }} path: |