8000
Skip to content

Bump actions/upload-artifact from 6 to 7#476

Merged
docktermj merged 1 commit intomainfrom
dependabot/github_actions/actions/upload-artifact-7
Mar 19, 2026
Merged

Bump actions/upload-artifact from 6 to 7#476
docktermj merged 1 commit intomainfrom
dependabot/github_actions/actions/upload-artifact-7

Conversation

@dependabot
Copy link
Copy Markdown
Contributor
@dependabot dependabot bot commented on behalf of github Mar 19, 2026

Bumps actions/upload-artifact from 6 to 7.

Release notes

Sourced from actions/upload-artifact's releases.

v7.0.0

v7 What's new

Direct Uploads

Adds support for uploading single files directly (unzipped). Callers can set the new archive parameter to false to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The name parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.

ESM

To support new versions of the @actions/* packages, we've upgraded the package to ESM.

What's Changed

New Contributors

Full Changelog: actions/upload-artifact@v6...v7.0.0

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Resolves #764
Resolves #762
Resolves #754
Resolves actions/upload-artifact#754
Resolves actions/upload-artifact#762
Resolves actions/upload-artifact#764

Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 6 to 7.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@v6...v7)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot requested a review from a team as a code owner March 19, 2026 18:54
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Mar 19, 2026
@github-actions
Copy link
Copy Markdown

πŸ€– Claude Code Review

PR Code Review

This is a straightforward dependency bump: actions/upload-artifact from v6 to v7 across three workflow files.

Code Quality

  • βœ… Change is minimal and focused β€” only the version pin is updated
  • βœ… No commented-out code
  • βœ… No logic changes; variable names and structure unchanged
  • βœ… DRY principle: consistent update applied across all three workflow files (go-test-darwin.yaml, go-test-linux.yaml, go-test-windows.yaml)
  • βœ… No defects, race conditions, or security concerns introduced

Testing

  • βœ… No application code changed; no new unit/integration tests required
  • βœ… The workflows themselves serve as the validation mechanism (CI runs)

Documentation

  • βœ… No README or API doc changes needed for a CI dependency bump
  • βœ… CHANGELOG update not required for a workflow-only change (acceptable for infra maintenance bumps)
  • βœ… No Markdown formatting issues in the changed files

Security

  • βœ… No hardcoded credentials
  • βœ… No sensitive data introduced
  • βœ… No .lic files or AQAAAD-prefixed strings present
  • βœ… Pinning to v7 (a major version tag) is standard practice for GitHub Actions; no SHA pinning concern raised beyond existing repo conventions

Summary: Clean, low-risk maintenance PR. All three workflow files consistently updated. No issues found. Approved. βœ…

Automated code review analyzing defects and coding standards

@github-actions
Copy link
Copy Markdown

Super-linter summary

Language Validation result
CHECKOV Pass βœ…
GITHUB_ACTIONS Pass βœ…
GITHUB_ACTIONS_ZIZMOR Pass βœ…
GITLEAKS Pass βœ…
GIT_MERGE_CONFLICT_MARKERS Pass βœ…
JSCPD Pass βœ…
PRE_COMMIT Pass βœ…
SPELL_CODESPELL Pass βœ…
TRIVY Pass βœ…
YAML Pass βœ…
YAML_PRETTIER Pass βœ…

All files and directories linted successfully

For more information, see the GitHub Actions workflow run

Powered by Super-linter

@docktermj docktermj merged commit 184516c into main Mar 19, 2026
35 checks passed
@docktermj docktermj deleted the dependabot/github_actions/actions/upload-artifact-7 branch March 19, 2026 19:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants

0