Skip to content

chore(deps): Bump actions/upload-artifact from 4 to 7#57

Merged
henrik-me merged 1 commit intomainfrom
dependabot/github_actions/actions/upload-artifact-7
May 4, 2026
Merged

chore(deps): Bump actions/upload-artifact from 4 to 7#57
henrik-me merged 1 commit intomainfrom
dependabot/github_actions/actions/upload-artifact-7

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 27, 2026

Bumps actions/upload-artifact from 4 to 7.

Release notes

Sourced from actions/upload-artifact's releases.

v7.0.0

v7 What's new

Direct Uploads

Adds support for uploading single files directly (unzipped). Callers can set the new archive parameter to false to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The name parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.

ESM

To support new versions of the @actions/* packages, we've upgraded the package to ESM.

What's Changed

New Contributors

Full Changelog: actions/upload-artifact@v6...v7.0.0

v6.0.0

v6 - What's new

[!IMPORTANT] actions/upload-artifact@v6 now runs on Node.js 24 (runs.using: node24) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.

Node.js 24

This release updates the runtime to Node.js 24. v5 had preliminary support for Node.js 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.

What's Changed

Full Changelog: actions/upload-artifact@v5.0.0...v6.0.0

v5.0.0

What's Changed

BREAKING CHANGE: this update supports Node v24.x. This is not a breaking change per-se but we're treating it as such.

... (truncated)

Commits
  • 043fb46 Merge pull request #797 from actions/yacaovsnc/update-dependency
  • 634250c Include changes in typespec/ts-http-runtime 0.3.5
  • e454baa Readme: bump all the example versions to v7 (#796)
  • 74fad66 Update the readme with direct upload details (#795)
  • bbbca2d Support direct file uploads (#764)
  • 589182c Upgrade the module to ESM and bump dependencies (#762)
  • 47309c9 Merge pull request #754 from actions/Link-/add-proxy-integration-tests
  • 02a8460 Add proxy integration test
  • b7c566a Merge pull request #745 from actions/upload-artifact-v6-release
  • e516bc8 docs: correct description of Node.js 24 support in README
  • Additional commits viewable in compare view

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Apr 27, 2026

Labels

The following labels could not be found: ci. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Apr 27, 2026
@dependabot dependabot Bot requested a review from henrik-me as a code owner April 27, 2026 00:35
@henrik-me
Copy link
Copy Markdown
Owner

@dependabot rebase

Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4 to 7.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@v4...v7)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/github_actions/actions/upload-artifact-7 branch from 22d6095 to c7e1e17 Compare May 4, 2026 18:03
@henrik-me
Copy link
Copy Markdown
Owner

Local pre-merge validation (GPT-5.5 plan + final-diff review)

This is a major-version bump (v4 → v7) so a combined plan + final-diff GPT-5.5 review was performed per repo convention.

Validated against worktree from rebased PR head c7e1e17:

  • Diff scope: 1 line in .github/workflows/ci-cd.yml only ΓÇö actions/upload-artifact@v4 ΓåÆ @v7 on the failure-only Playwright artifact upload step.
  • Sole usage in repo (no other upload-artifact, no download-artifact, no downstream consumers of artifact name playwright-test-results).
  • v4 ΓåÆ v7 changelog walk-through:
    • v5.0.0: bumps internal @actions/artifact package; no public API change.
    • v6.0.0: Node.js 24 runtime; requires Actions Runner ΓëÑ 2.327.1 (ubuntu-latest GitHub-hosted runners support this).
    • v7.0.0: ESM internal + opt-in archive: false for direct uploads; default zip behavior unchanged.
  • Defaults unchanged for the inputs we use (path, name, retention-days, if-no-files-found: warn, compression-level: 6, overwrite: false, include-hidden-files: false).
  • CI on rebased head: all required checks SUCCESS (Build & Test, both CodeQL flavors, E2E Playwright).
  • Floating @v7 tag pinning is consistent with repo convention for other Actions (@v6/@v7 etc.).

CI gap noted: the if: failure() step did not actually fire on this green run, so v7's upload path is not empirically exercised here. Acceptable residual risk for a 1-line major bump where the exercised API surface is unchanged.

Recommendation: APPROVE. No blocking issues.

Copy link
Copy Markdown

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates the CI workflow to use a newer major version of actions/upload-artifact for Playwright failure artifacts. This fits the repository’s ongoing CI/CD maintenance by keeping GitHub Actions dependencies current without changing the workflow’s behavior.

Changes:

  • Bump actions/upload-artifact from v4 to v7 in the Playwright artifact upload step.
  • Keep the existing failure-only upload behavior and artifact configuration unchanged.

Copy link
Copy Markdown
Owner

@henrik-me henrik-me left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Dependabot PR validated locally per repo conventions: GPT-5.5 final-diff review (plan+diff for #57 as a major bump), full pre-push verification (build/test/E2E), Copilot PR review loop completed with all threads resolved. Approving as the human reviewer to satisfy the branch ruleset's required-approval gate.

@henrik-me henrik-me merged commit a3d0202 into main May 4, 2026
14 checks passed
@henrik-me henrik-me deleted the dependabot/github_actions/actions/upload-artifact-7 branch May 4, 2026 18:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants