Skip to content

Bump actions/upload-artifact from 6 to 7 in /.github/actions/build-node#106

Merged
robdmoore merged 1 commit intomainfrom
dependabot/github_actions/dot-github/actions/build-node/actions/upload-artifact-7
Apr 2, 2026
Merged

Bump actions/upload-artifact from 6 to 7 in /.github/actions/build-node#106
robdmoore merged 1 commit intomainfrom
dependabot/github_actions/dot-github/actions/build-node/actions/upload-artifact-7

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Mar 23, 2026

Bumps actions/upload-artifact from 6 to 7.

Release notes

Sourced from actions/upload-artifact's releases.

v7.0.0

v7 What's new

Direct Uploads

Adds support for uploading single files directly (unzipped). Callers can set the new archive parameter to false to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The name parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.

ESM

To support new versions of the @actions/* packages, we've upgraded the package to ESM.

What's Changed

New Contributors

Full Changelog: actions/upload-artifact@v6...v7.0.0

Commits

@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Mar 23, 2026
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 6 to 7.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@v6...v7)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/github_actions/dot-github/actions/build-node/actions/upload-artifact-7 branch from 6cbe737 to 4668807 Compare April 2, 2026 02:29
@github-actions
Copy link
Copy Markdown
Contributor

github-actions bot commented Apr 2, 2026

🛡️ SHA Pinned Actions Report

Found 52 issue(s) across 28 file(s) scanned.

File Issue
.github/workflows/zendesk_github_add_comment.yml actions/github-script@v8 is not pinned to a full length commit SHA.
.github/workflows/zendesk_github_close_issue.yml actions/github-script@v8 is not pinned to a full length commit SHA.
.github/workflows/zendesk_github_ticket_solved.yml actions/github-script@v8 is not pinned to a full length commit SHA.
.github/workflows/node-trusted-publish.yml actions/checkout@v6 is not pinned to a full length commit SHA.
.github/workflows/node-trusted-publish.yml actions/setup-node@v6 is not pinned to a full length commit SHA.
.github/workflows/node-trusted-publish.yml JS-DevTools/npm-publish@v4 is not pinned to a full length commit SHA.
.github/workflows/node-publish-public.yml actions/checkout@v6 is not pinned to a full length commit SHA.
.github/workflows/node-publish-public.yml actions/setup-node@v6 is not pinned to a full length commit SHA.
.github/workflows/node-publish-public.yml JS-DevTools/npm-publish@v4 is not pinned to a full length commit SHA.
.github/workflows/zendesk_github_ticket_commented.yml actions/github-script@v8 is not pinned to a full length commit SHA.
.github/workflows/node-build-zip.yml actions/checkout@v6 is not pinned to a full length commit SHA.
.github/workflows/node-build-zip.yml actions/setup-node@v6 is not pinned to a full length commit SHA.
.github/workflows/node-build-zip.yml actions/upload-artifact@v7 is not pinned to a full length commit SHA.
.github/workflows/ensure-sha-pinned-actions.yml actions/checkout@v6 is not pinned to a full length commit SHA.
.github/workflows/ensure-sha-pinned-actions.yml actions/github-script@v8 is not pinned to a full length commit SHA.
.github/workflows/node-build.yml actions/checkout@v6 is not pinned to a full length commit SHA.
.github/workflows/node-build.yml actions/setup-node@v6 is not pinned to a full length commit SHA.
.github/workflows/node-build.yml actions/upload-artifact@v7 is not pinned to a full length commit SHA.
.github/workflows/node-pnpm-build-zip.yml actions/checkout@v6 is not pinned to a full length commit SHA.
.github/workflows/node-pnpm-build-zip.yml actions/setup-node@v6 is not pinned to a full length commit SHA.
.github/workflows/node-pnpm-build-zip.yml actions/upload-artifact@v7 is not pinned to a full length commit SHA.
.github/workflows/node-ci.yml actions/checkout@v6 is not pinned to a full length commit SHA.
.github/workflows/node-ci.yml actions/setup-node@v6 is not pinned to a full length commit SHA.
.github/workflows/node-ci.yml phoenix-actions/test-reporting@v15 is not pinned to a full length commit SHA.
.github/workflows/node-deploy-azure-web-app.yml actions/download-artifact@v8 is not pinned to a full length commit SHA.
.github/workflows/node-deploy-azure-web-app.yml azure/webapps-deploy@v3 is not pinned to a full length commit SHA.
.github/workflows/python-uv-ci.yml actions/checkout@v6 is not pinned to a full length commit SHA.
.github/workflows/python-uv-ci.yml astral-sh/setup-uv@v7 is not pinned to a full length commit SHA.
.github/workflows/python-uv-ci.yml actions/upload-artifact@v7 is not pinned to a full length commit SHA.
.github/workflows/release-please.yml googleapis/release-please-action@v4 is not pinned to a full length commit SHA.
.github/workflows/release-please.yml actions/checkout@v6 is not pinned to a full length commit SHA.
.github/workflows/node-publish-internal.yml actions/checkout@v6 is not pinned to a full length commit SHA.
.github/workflows/node-publish-internal.yml actions/setup-node@v6 is not pinned to a full length commit SHA.
.github/workflows/node-publish-internal.yml JS-DevTools/npm-publish@v4 is not pinned to a full length commit SHA.
.github/workflows/python-uv-build-zip.yml actions/checkout@v6 is not pinned to a full length commit SHA.
.github/workflows/python-uv-build-zip.yml astral-sh/setup-uv@v7 is not pinned to a full length commit SHA.
.github/workflows/python-uv-build-zip.yml actions/upload-artifact@v7 is not pinned to a full length commit SHA.
.github/actions/prepare-artifact/action.yml actions/download-artifact@v8 is not pinned to a full length commit SHA.
.github/actions/build-node/action.yml actions/checkout@v6 is not pinned to a full length commit SHA.
.github/actions/build-node/action.yml actions/setup-node@v6 is not pinned to a full length commit SHA.
.github/actions/build-node/action.yml actions/upload-artifact@v7 is not pinned to a full length commit SHA.
.github/actions/node-deploy-cdk/action.yml actions/download-artifact@v8 is not pinned to a full length commit SHA.
.github/actions/node-deploy-cdk/action.yml actions/setup-node@v6 is not pinned to a full length commit SHA.
.github/actions/node-deploy-cdk/action.yml aws-actions/configure-aws-credentials@v5 is not pinned to a full length commit SHA.
.github/actions/node-deploy-cdk/action.yml aws-actions/configure-aws-credentials@v5 is not pinned to a full length commit SHA.
.github/actions/build-node-zip/action.yml actions/checkout@v6 is not pinned to a full length commit SHA.
.github/actions/build-node-zip/action.yml actions/setup-node@v6 is not pinned to a full length commit SHA.
.github/actions/build-node-zip/action.yml actions/upload-artifact@v6 is not pinned to a full length commit SHA.
.github/actions/build-docker/action.yml docker/setup-buildx-action@v4 is not pinned to a full length commit SHA.
.github/actions/build-docker/action.yml actions/upload-artifact@v6 is not pinned to a full length commit SHA.
.github/actions/deploy-bicep/action.yml azure/bicep-deploy@v2 is not pinned to a full length commit SHA.
.github/actions/deploy-bicep/action.yml azure/bicep-deploy@v2 is not pinned to a full length commit SHA.

@robdmoore robdmoore merged commit 3f32aee into main Apr 2, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant