Skip to content

chore(ci)(deps): bump actions/upload-artifact from 4 to 7 - #1424

Merged
Dani Akash (DaniAkash) merged 1 commit into
mainfrom
dependabot/github_actions/actions/upload-artifact-7
Jun 30, 2026
Merged

Dani Akash (DaniAkash) merged 1 commit into
mainfrom
dependabot/github_actions/actions/upload-artifact-7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 29, 2026

Copy link
Copy Markdown
Contributor

Bumps actions/upload-artifact from 4 to 7.

Release notes

Sourced from actions/upload-artifact's releases.

v7.0.0

v7 What's new

Direct Uploads

Adds support for uploading single files directly (unzipped). Callers can set the new archive parameter to false to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The name parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.

ESM

To support new versions of the @actions/* packages, we've upgraded the package to ESM.

What's Changed

New Contributors

Full Changelog: actions/upload-artifact@v6...v7.0.0

v6.0.0

v6 - What's new

[!IMPORTANT] actions/upload-artifact@v6 now runs on Node.js 24 (runs.using: node24) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.

Node.js 24

This release updates the runtime to Node.js 24. v5 had preliminary support for Node.js 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.

What's Changed

Full Changelog: actions/upload-artifact@v5.0.0...v6.0.0

v5.0.0

What's Changed

BREAKING CHANGE: this update supports Node v24.x. This is not a breaking change per-se but we're treating it as such.

... (truncated)

Commits
  • 043fb46 Merge pull request #797 from actions/yacaovsnc/update-dependency
  • 634250c Include changes in typespec/ts-http-runtime 0.3.5
  • e454baa Readme: bump all the example versions to v7 (#796)
  • 74fad66 Update the readme with direct upload details (#795)
  • bbbca2d Support direct file uploads (#764)
  • 589182c Upgrade the module to ESM and bump dependencies (#762)
  • 47309c9 Merge pull request #754 from actions/Link-/add-proxy-integration-tests
  • 02a8460 Add proxy integration test
  • b7c566a Merge pull request #745 from actions/upload-artifact-v6-release
  • e516bc8 docs: correct description of Node.js 24 support in README
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4 to 7.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@v4...v7)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Jun 29, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: github-actions. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jun 29, 2026
@greptile-apps

greptile-apps Bot commented Jun 29, 2026

Copy link
Copy Markdown
Contributor

PR author is not in the allowed authors list.

@github-actions github-actions Bot added the chore label Jun 29, 2026
@github-actions

Copy link
Copy Markdown
Contributor

✅ Tests passed — 1414/1418

Suite Passed Failed Skipped
✅ agent 279/279 0 0
✅ build 24/24 0 0
⚠️ claw-app 0/0 0 0
⚠️ claw-onboard 0/0 0 0
⚠️ claw-server 0/0 0 0
✅ eval 91/91 0 0
✅ server-agent 301/301 0 0
✅ server-api 143/143 0 0
✅ server-browser 10/10 0 0
✅ server-integration 10/10 0 0
✅ server-lib 257/258 0 1
✅ server-root 47/50 0 3
✅ server-tools 252/252 0 0

View workflow run

@DaniAkash
Dani Akash (DaniAkash) merged commit 5888fba into main Jun 30, 2026
19 checks passed
@DaniAkash
Dani Akash (DaniAkash) deleted the dependabot/github_actions/actions/upload-artifact-7 branch June 30, 2026 07:53
Dmitrii Vasilev (gHashTag) added a commit to gHashTag/BrowserOS that referenced this pull request Sep 4, 2026
Filing N tasks does not give you N workers, and last round proved it on my own
work: of four issues filed, browseros-ai#1420 and browseros-ai#1421 both named queen-tick.ts in their
Boundary. Two bees may not write one file, so the scheduler correctly refused
one with fileConflict and the fourth worker slot stayed empty while the backlog
looked healthy.

The conflict is a property of the WORK, so it is settled where the work is
created. That is what Dependabot's grouping, Nx's file-keyed task graph and
Kubernetes anti-affinity all do: tell the scheduler only about things that can
coexist. author.mjs took candidates in the order they were measured and never
asked. It now takes a disjoint batch, widest boundary first, excluding anything
that collides with paths live dispatches already hold, and it PRINTS every
candidate it set aside with the reason - a selector that drops work silently is
indistinguishable from a broken one.

disjoint.mjs compares paths component-wise, never as strings. rings/SR-0 is a
string prefix of rings/SR-00/Queen.swift and is not a directory containing it;
comparing raw prefixes is a recorded defect of this project. Run against the
live board it immediately found a real double claim: rings/SR-02/ChatViewModel.swift
is held by BOTH browseros-ai#1133 and browseros-ai#1240.

A THIRD DETECTOR, because two were not enough variety to feed four workers. The
backlog starved with the swarm at zero bees: author.mjs found fourteen real
deficits and could file against NONE, every one already having an issue - one of
the ones parked at the retry ceiling. L3 is repository law and is broken in 86
server files by 2690 characters, almost all box drawing in comment rules. That
is the right kind of fuel: measurable by one grep, one file per task so N tasks
really do give N workers, and renewable. Files with non-ASCII in live code are
skipped, because rewriting a user-facing string is a change of behaviour.

AND A FALSE REFUSAL OF MY OWN, caught by filing them. brief-gate demanded a
promised identifier as the ONLY mechanically checkable criterion, so it refused
three real cleanups - a cleanup defines nothing new. A command over a path the
Boundary reserves, with an exact expected output, is a property of the TREE
rather than of the report, and is harder to fake than an identifier. Accepted
now, with the demand kept strict: exact output, and the path must be one the
Boundary actually holds. Three negatives pin it.

fp-check no longer counts NEVER ACTED as a false accusation. That state is a
true statement about the world and the single most valuable line coverage.mjs
prints - it is how the reaper's untested branch was found. Counting it here made
every newly written tool look like a false accusation until its first act, which
would have taught me to ignore the checker.

The selftest fixture now mints its identifier per run. It used a fixed name, and
once the file was committed that name existed in the tree five times - so
brief-gate did exactly its job and refused the draft. The fixture had falsified
its own premise by being saved.

selftest 57/57. fp-check 19 known-good inputs, 0 accused. Three issues filed
with pairwise disjoint boundaries: browseros-ai#1424, browseros-ai#1425, browseros-ai#1426.

Co-authored-by: Dmitrii Vasilev <trackgmedernj@hotmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

chore dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant