Skip to content

chore(deps): bump actions/upload-artifact from 4.4.0 to 7.0.1 - #216

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions/upload-artifact-7.0.1
Closed

chore(deps): bump actions/upload-artifact from 4.4.0 to 7.0.1#216
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions/upload-artifact-7.0.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 13, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps actions/upload-artifact from 4.4.0 to 7.0.1.

Release notes

Sourced from actions/upload-artifact's releases.

v7.0.1

What's Changed

Full Changelog: actions/upload-artifact@v7...v7.0.1

v7.0.0

v7 What's new

Direct Uploads

Adds support for uploading single files directly (unzipped). Callers can set the new archive parameter to false to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The name parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.

ESM

To support new versions of the @actions/* packages, we've upgraded the package to ESM.

What's Changed

New Contributors

Full Changelog: actions/upload-artifact@v6...v7.0.0

v6.0.0

v6 - What's new

[!IMPORTANT] actions/upload-artifact@v6 now runs on Node.js 24 (runs.using: node24) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.

Node.js 24

This release updates the runtime to Node.js 24. v5 had preliminary support for Node.js 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.

What's Changed

Full Changelog: actions/upload-artifact@v5.0.0...v6.0.0

v5.0.0

What's Changed

... (truncated)

Commits
  • 043fb46 Merge pull request #797 from actions/yacaovsnc/update-dependency
  • 634250c Include changes in typespec/ts-http-runtime 0.3.5
  • e454baa Readme: bump all the example versions to v7 (#796)
  • 74fad66 Update the readme with direct upload details (#795)
  • bbbca2d Support direct file uploads (#764)
  • 589182c Upgrade the module to ESM and bump dependencies (#762)
  • 47309c9 Merge pull request #754 from actions/Link-/add-proxy-integration-tests
  • 02a8460 Add proxy integration test
  • b7c566a Merge pull request #745 from actions/upload-artifact-v6-release
  • e516bc8 docs: correct description of Node.js 24 support in README
  • Additional commits viewable in compare view

@dependabot @github

dependabot Bot commented on behalf of github Jul 13, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: copilot. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot
dependabot Bot requested a review from ivegamsft as a code owner July 13, 2026 09:33
@github-actions github-actions Bot added size:XS sprint:2026-W29 Auto-assigned sprint label (ISO week) pr-readiness-blocked PR readiness loop found missing reviewer/owner/release metadata or BEHIND status labels Jul 13, 2026
@github-actions

github-actions Bot commented Jul 13, 2026

Copy link
Copy Markdown
Contributor

PR readiness routing nudge

This PR was evaluated by the event-driven readiness loop on labeled and needs lifecycle action (ready-routing).

  • No assignee is set for ownership handoff.

Deterministic escalation path:

  • Label pr-readiness-blocked is applied while readiness requirements are incomplete.
  • Resolve the blockers listed above, then re-trigger by updating metadata or pushing a commit.

Suggested next actions:

  • Request reviewers (or a reviewer team).
  • Confirm an assignee/owner.
  • Add a release/planning label (wave:* or sprint:*).
  • If BEHIND, update branch from base before final review.

Automated by BaseCoat PR readiness event loop.

@github-actions

github-actions Bot commented Jul 13, 2026

Copy link
Copy Markdown
Contributor

🔍 Dependency Update Risk Assessment

Package: actions/upload-artifact
Bump: 4.4.0 → 7.0.1 (MAJOR)
Risk Level: 🔴 HIGH

Breaking Changes

Suggested Test Focus

  • Run the full test suite before merging.
  • Review the actions/upload-artifact migration guide for 4.4.0 → 7.0.1.
  • Check CI passes on this PR before merging.

CVE Context

No CVE referenced in this PR.

Generated by dependency-update-advisor. Review before merging.

@github-actions

github-actions Bot commented Jul 13, 2026

Copy link
Copy Markdown
Contributor

🔐 Secret Scanning — All Clear

✅ No secrets detected by gitleaks on this PR.

This check is warn-only and does not block merging. Config: .gitleaks.toml.

@github-actions

github-actions Bot commented Jul 13, 2026

Copy link
Copy Markdown
Contributor

PR lifecycle hygiene nudge

This PR was flagged during the weekly full PR lifecycle sweep. Please address the following to avoid backlog drift:

  • No assignee is set for ownership handoff.

Suggested next actions:

  • Confirm or assign an owner.
  • Request reviewers (or a reviewer team).
  • If this work is paused, close or convert to draft with a status note.

Automated by BaseCoat PR lifecycle hygiene workflow.

This was referenced Jul 13, 2026
Open
Open
@dependabot
chore(deps): bump actions/upload-artifact from 4.4.0 to 7.0.1
3d3e2c9 
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.4.0 to 7.0.1.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@v4.4.0...043fb46)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions/upload-artifact-7.0.1 branch from 8344f2d to 3d3e2c9 Compare July 26, 2026 18:31
@github-actions

github-actions Bot commented Jul 26, 2026

Copy link
Copy Markdown
Contributor

PR auto-merge executor status

  • Status: blocked

  • Policy pack: solo-dev

  • Risk tier: high

  • Required approvals: 0

  • Human review boundary: not-required

  • Required checks not satisfied: lint-and-validate (status=pending, check=pending); test (status=pending, check=pending); validate-commit-messages (status=pending, check=pending); validate-unix (status=pending, check=pending); validate-windows (status=pending, check=pending); release-label-gate (status=pending, check=pending)

Run: https://github.com/ivegamsft/basecoat/actions/runs/30214892114

This was referenced Jul 27, 2026
Closed
Closed
@ibuyspy

ibuyspy commented Aug 4, 2026

Copy link
Copy Markdown
Contributor

Closing as production-mirror automation noise. This repository is a publish target; dependency changes must land in IBuySpy-Shared/basecoat and arrive through the governed publish flow. Upstream #2703 / PR #2741 removes Dependabot and internal workflows from future mirror payloads.

@ivegamsft

ivegamsft commented Aug 5, 2026

Copy link
Copy Markdown
Owner

Closing this pull request because ivegamsft/basecoat is a production mirror. Dependency and automation changes must be made in the source-of-truth repository and will arrive through the controlled publication process. Direct mirror changes are overwritten by the next publish.

@ivegamsft ivegamsft closed this Aug 5, 2026
@dependabot @github

dependabot Bot commented on behalf of github Aug 5, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/github_actions/actions/upload-artifact-7.0.1 branch August 5, 2026 01:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@ivegamsft ivegamsft Awaiting requested review from ivegamsft ivegamsft is a code owner

Assignees

No one assigned

Labels

dependencies pr-readiness-blocked PR readiness loop found missing reviewer/owner/release metadata or BEHIND status size:XS sprint:2026-W29 Auto-assigned sprint label (ISO week)

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@ibuyspy @ivegamsft