From b10481e8957f81bae3231d2da59f410971a1c3d5 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 11 Oct 2026 16:15:00 +0000 Subject: [PATCH] chore(actions): bump actions/upload-artifact from 7.0.1 to 7.0.2 Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 7.0.1 to 7.0.2. - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/043fb46d1a93c77aae656e7c1c64a875d1fc6a0a...cf430e030ddbb5b0abf93d22962f4752f3646cd9) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-version: 7.0.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- .github/workflows/ci.yml | 6 +++--- .github/workflows/corpus.yml | 2 +- .github/workflows/monthly-evidence.yml | 2 +- .github/workflows/npm-bootstrap.yml | 6 +++--- .github/workflows/npm-publish.yml | 2 +- .github/workflows/release.yml | 2 +- 6 files changed, 10 insertions(+), 10 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 1482ab8..14f6284 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -280,7 +280,7 @@ jobs: grep -Fx 'exit-code=0' "$RUNNER_TEMP/action-summary-output.txt" - name: Upload hosted Action summary evidence if: always() - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: action-consumer-evidence-${{ github.run_id }} path: | @@ -333,7 +333,7 @@ jobs: --arg summarySha256 "$(sha256sum "$SUMMARY_FILE" | cut -d' ' -f1)" \ '{workflowRunId: $workflowRunId, jobId: $jobId, checkRunId: $checkRunId, annotationCount: $annotationCount, summarySha256: $summarySha256}' \ > "$RUNNER_TEMP/action-runner-evidence.json" - - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: action-runner-evidence-${{ github.run_id }} path: ${{ runner.temp }}/action-runner-evidence.json @@ -372,7 +372,7 @@ jobs: SCRIPTSPECT_SOURCE_COMMIT: ${{ github.sha }} run: pnpm exec tsx tools/benchmark-workspace.ts "$RUNNER_TEMP/workspace-benchmark.json" 100 2000 - name: Upload hosted benchmark evidence - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: workspace-benchmark-${{ github.sha }} path: ${{ runner.temp }}/workspace-benchmark.json diff --git a/.github/workflows/corpus.yml b/.github/workflows/corpus.yml index 41a2dbe..d72949b 100644 --- a/.github/workflows/corpus.yml +++ b/.github/workflows/corpus.yml @@ -60,7 +60,7 @@ jobs: fi - name: Upload draft evidence for maintainer review if: always() - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: corpus-draft-${{ github.run_id }} path: | diff --git a/.github/workflows/monthly-evidence.yml b/.github/workflows/monthly-evidence.yml index 5b5dca3..8e3009f 100644 --- a/.github/workflows/monthly-evidence.yml +++ b/.github/workflows/monthly-evidence.yml @@ -40,7 +40,7 @@ jobs: GITHUB_TOKEN: ${{ github.token }} - name: Upload the draft for maintainer review if: always() - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: monthly-evidence-draft-${{ github.run_id }} path: evidence/ diff --git a/.github/workflows/npm-bootstrap.yml b/.github/workflows/npm-bootstrap.yml index 6721178..4f46d1c 100644 --- a/.github/workflows/npm-bootstrap.yml +++ b/.github/workflows/npm-bootstrap.yml @@ -218,7 +218,7 @@ jobs: > "$RUNNER_TEMP/verified-built-anchor-files.json" - name: Persist the exact bootstrap candidate before npm publication if: steps.anchor.outputs.recovered != 'true' - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: npm-bootstrap-anchor-${{ inputs.version }}-${{ inputs.source-sha }} path: | @@ -318,7 +318,7 @@ jobs: grep -Eq 'E404|404 Not Found' "$RUNNER_TEMP/package-name.err" fi - name: Hand the verified candidate to a fresh publisher runner - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: npm-bootstrap-handoff-${{ github.run_id }} path: | @@ -725,7 +725,7 @@ jobs: {initialLatestAssignment: $registryState[0].initialLatestAssignment} else {} end)' > "$RUNNER_TEMP/bootstrap/bootstrap-integrity-contract.json" - name: Retain bootstrap evidence for maintainer review - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: npm-bootstrap-evidence-${{ inputs.version }} path: | diff --git a/.github/workflows/npm-publish.yml b/.github/workflows/npm-publish.yml index 6e6507e..25e293b 100644 --- a/.github/workflows/npm-publish.yml +++ b/.github/workflows/npm-publish.yml @@ -793,7 +793,7 @@ jobs: fi - name: Upload the terminal README handoff receipt - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: readme-release-receipt-v${{ needs.publish.outputs.version }} path: ${{ runner.temp }}/readme-release-receipt.json diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index e59edb5..8aeaeba 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -473,7 +473,7 @@ jobs: - name: Retain the candidate before creating tags or releases if: steps.recover.outputs.needs-build == 'true' id: candidate-upload - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: release-candidate-${{ needs.authorize.outputs.version }}-${{ github.run_id }} path: ${{ runner.temp }}/candidate