Skip to content

build(deps): bump actions/upload-artifact from 4.6.2 to 7.0.2 - #20

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions/upload-artifact-7.0.2
Open

build(deps): bump actions/upload-artifact from 4.6.2 to 7.0.2#20
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions/upload-artifact-7.0.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 10, 2026 •
edited
Loading

Copy link
Copy Markdown

Bumps actions/upload-artifact from 4.6.2 to 7.0.2.

Release notes

Sourced from actions/upload-artifact's releases.

v7.0.2

What's Changed

  • Improves artifact download retries when the service returns HTTP 429 (rate limiting), including honoring valid Retry-After headers.
  • Updates @​actions/artifact to v6.3.1.

New Contributors

Full Changelog: actions/upload-artifact@v7.0.1...v7.0.2

v7.0.1

What's Changed

Full Changelog: actions/upload-artifact@v7...v7.0.1

v7.0.0

v7 What's new

Direct Uploads

Adds support for uploading single files directly (unzipped). Callers can set the new archive parameter to false to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The name parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.

ESM

To support new versions of the @actions/* packages, we've upgraded the package to ESM.

What's Changed

New Contributors

Full Changelog: actions/upload-artifact@v6...v7.0.0

v6.0.0

v6 - What's new

[!IMPORTANT] actions/upload-artifact@v6 now runs on Node.js 24 (runs.using: node24) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.

Node.js 24

This release updates the runtime to Node.js 24. v5 had preliminary support for Node.js 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.

... (truncated)

Commits
  • cf430e0 Merge pull request #822 from actions/tunc-d-prepare-upload-v7-0-2
  • c2acded chore: prepare v7.0.2 release
  • 4687c1b Merge pull request #821 from actions/tunc-d-upload-artifact-package-bump
  • 8cbe1be Bump @​actions/artifact to 6.3.1
  • 043fb46 Merge pull request #797 from actions/yacaovsnc/update-dependency
  • 634250c Include changes in typespec/ts-http-runtime 0.3.5
  • e454baa Readme: bump all the example versions to v7 (#796)
  • 74fad66 Update the readme with direct upload details (#795)
  • bbbca2d Support direct file uploads (#764)
  • 589182c Upgrade the module to ESM and bump dependencies (#762)
  • Additional commits viewable in compare view

@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented Oct 10, 2026 •
edited
Loading

Copy link
Copy Markdown

Deploying python-wheels-builder with  Cloudflare Pages  Cloudflare Pages

Latest commit: ed1190e
Status: ✅  Deploy successful!
Preview URL: https://7ccbb02e.python-wheels-builder.pages.dev
Branch Preview URL: https://dependabot-github-actions-ac-iarz.python-wheels-builder.pages.dev

View logs

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Oct 10, 2026
@dependabot dependabot Bot mentioned this pull request Oct 10, 2026
Closed
@coderabbitai

coderabbitai Bot commented Oct 10, 2026 •
edited
Loading

Copy link
Copy Markdown

Review in Change Stack →

Important

Review skipped

Review was skipped as selected files did not have any reviewable changes.

⚙️ Run configuration
  • Configuration used: defaults
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 95fd3f58-8069-44ad-95bb-5180bdf4cfcf
📥 Commits

Reviewing files that changed from the base of the PR and between 1d9ce31 and ed1190e.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration
  • Configuration used: defaults
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: dde7ff04-9811-4326-adf9-4b12ea76f03c
📥 Commits

Reviewing files that changed from the base of the PR and between d056432 and 1d9ce31.

📒 Files selected for processing (1)
  • .github/workflows/release.yml

Included review availability: This review used your included allowance. Your plan provides up to 10 included reviews per hour; 6 remain after this review.

📝 Walkthrough
📝 Walkthrough

Walkthrough

Three GitHub Actions workflows update five artifact upload steps from actions/upload-artifact v4.6.2 to v7.0.2. Artifact names, paths, conditions, and other settings remain unchanged.

Changes

Artifact Upload Action Update

Layer / File(s) Summary
Update artifact upload actions
.github/workflows/build-environment-image.yml, .github/workflows/release.yml, .github/workflows/sbom-image.yml		 Five artifact upload steps now use actions/upload-artifact v7.0.2. Existing artifact settings remain unchanged.

Priority: ⬇️ Low

Estimated code review effort: 1 (Trivial) | ~5 minutes

Change: Other

Suggested reviewers: patrickryankenneth

Merge Risk: ⚪ Minimal · up to 1d9ce

No concrete merge-blocking failure is established for these artifact uploads. The regular workflow run can confirm that the updated action works on the hosted runners.

Architecture Summary

Architecture risk: 🔵 Low · up to 1d9ce

The changed surface does not map to a changed system, dependency edge, entrypoint, or external dependency.

Changed systems: None identified.

Architecture concerns
No architecture-level concerns identified.

Review details

Before / after behavior

  • observed — Modified behavior in .github/workflows/build-environment-image.yml: The apk-list upload step now uses actions/upload-artifact v7.0.2 instead of v4.6.2; its condition and artifact configuration are unchanged.
  • observed — Modified behavior in .github/workflows/build-environment-image.yml: The digest, builder-inputs, and build-log upload step now uses actions/upload-artifact v7.0.2 instead of v4.6.2; its artifact configuration is unchanged.
  • observed — Modified behavior in .github/workflows/sbom-image.yml: The upload step now uses the pinned actions/upload-artifact v7.0.2 revision instead of v4.6.2.
  • observed — Modified behavior in .github/workflows/release.yml: The VEX coverage artifact upload now uses actions/upload-artifact v7.0.2 instead of v4.6.2.
Pre-merge checks | Passed 5
✅ Passed checks (5 passed)
Check name Status Explanation
Description Check Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check Passed The title clearly and concisely describes the dependency update applied across the workflow files.
Docstring Coverage Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check Passed Check skipped because no linked issues were found for this pull request.
✨ Finishing Touches 💡 1
🛠️ Fix failing CI checks 💡
  • Commit to this branch
  • Create a new PR
🧪 Generate unit tests (beta)
  • Commit to this branch
  • Create a new PR
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Comment @coderabbitai help to get the list of available commands.

@deepsource-io

deepsource-io Bot commented Oct 10, 2026 •
edited
Loading

Copy link
Copy Markdown

DeepSource Code Review

We reviewed changes in 462ef7c...ed1190e on this pull request. Below is the summary for the review, and you can see the individual issues we found as inline review comments.

See full review on DeepSource ↗

PR Report Card

Overall Grade   Security  

Reliability  

Complexity  

Hygiene  

Code Review Summary

Analyzer Status Updated (UTC) Details
Python Oct 11, 2026 7:40p.m. Review ↗
Shell Oct 11, 2026 7:40p.m. Review ↗
Secrets Oct 11, 2026 7:40p.m. Review ↗
Docker Oct 11, 2026 7:40p.m. Review ↗
Rust Oct 11, 2026 7:40p.m. Review ↗
PowerShell Oct 11, 2026 7:40p.m. Review ↗

Important

AI Review is run only on demand for your team. We're only showing results of static analysis review right now. To trigger AI Review, comment @deepsourcebot review on this thread.

@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions/upload-artifact-7.0.2 branch 2 times, most recently from d056432 to 1d9ce31 Compare October 11, 2026 04:15
@dependabot
build(deps): bump actions/upload-artifact from 4.6.2 to 7.0.2
ed1190e 
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.6.2 to 7.0.2.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@ea165f8...cf430e0)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: 7.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions/upload-artifact-7.0.2 branch from 1d9ce31 to ed1190e Compare October 11, 2026 19:40

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants