chore(deps): update actions/upload-artifact action to v7#5015
Conversation
There was a problem hiding this comment.
Code Review: chore(deps): update actions/upload-artifact action to v7
This is a straightforward Renovate bot dependency update upgrading actions/upload-artifact from v6 to v7 across two workflow files. The changes are correct and complete.
What's Changed
- 14 occurrences of
actions/upload-artifactupdated from v6 → v7 across:.github/workflows/dotnet.yml(3 uses): pinned format@v6.0.0→@v7.0.0.github/workflows/speed-comparison.yml(11 uses): floating format@v6→@v7
Assessment: ✅ Looks Good
The update is consistent and covers all occurrences. actions/upload-artifact v7 moves from Node 20 to Node 20 (same runtime) but drops support for some older action runner versions and includes reliability improvements — a safe upgrade.
Minor Observation (Pre-existing, Not Introduced Here)
There's an inconsistency in version pinning strategy between the two files:
dotnet.ymluses fully-pinned versions (@v7.0.0) — more reproducible and securespeed-comparison.ymluses floating major versions (@v7) — easier to get patches automatically but less deterministic
This isn't introduced by this PR, but it may be worth standardizing across both files in a future cleanup. The pinned-version approach (@v7.0.0) is generally preferred for security-sensitive CI workflows since it prevents unexpected behaviour from upstream patches.
Safe to merge.
0633c88 to
6f2a703
Compare
There was a problem hiding this comment.
Code Review: chore(deps): update actions/upload-artifact action to v7
This is a straightforward Renovate bot dependency update upgrading actions/upload-artifact from v6 to v7 across two workflow files.
Summary of Changes
- 14 occurrences updated across two workflow files:
.github/workflows/dotnet.yml(3 uses): pinned format@v6.0.0→@v7.0.0.github/workflows/speed-comparison.yml(11 uses): floating format@v6→@v7
Assessment: ✅ Looks Good
The update is consistent and covers all occurrences. No issues to flag.
Follow-up from Previous Review
My prior comment noted a pre-existing inconsistency in version pinning strategy between the two files (@v7.0.0 vs @v7). That inconsistency is still present but is out of scope for this PR. Standardizing to pinned versions (e.g. @v7.0.0) in speed-comparison.yml would improve reproducibility and security, and is worth a dedicated cleanup PR.
Safe to merge.
6f2a703 to
01adc66
Compare
There was a problem hiding this comment.
Code Review: chore(deps): update actions/upload-artifact action to v7
This is a Renovate bot dependency update upgrading actions/upload-artifact from v6 to v7.
Summary
- 14 occurrences updated across two workflow files:
.github/workflows/dotnet.yml(3 uses): pinned format@v6.0.0→@v7.0.0.github/workflows/speed-comparison.yml(11 uses): floating format@v6→@v7
Assessment: ✅ Looks Good
The update is consistent and complete — all occurrences have been updated. No regressions expected; v7 maintains Node 20 as the runtime and brings reliability fixes.
Ongoing Note (Pre-existing)
As noted in prior reviews, there's a pre-existing inconsistency in version pinning strategy between the two files (@v7.0.0 in dotnet.yml vs @v7 in speed-comparison.yml). This is out of scope for this PR but remains worth a dedicated cleanup to standardize on pinned versions for better reproducibility and security.
Safe to merge.
01adc66 to
cf7c2b5
Compare
There was a problem hiding this comment.
Code Review: chore(deps): update actions/upload-artifact action to v7
This is the fourth review pass on this Renovate bot PR. No new changes have been introduced since the last review.
Summary
- 14 occurrences of
actions/upload-artifactupdated from v6 → v7 across two workflow files:.github/workflows/dotnet.yml(3 uses): pinned format@v6.0.0→@v7.0.0.github/workflows/speed-comparison.yml(11 uses): floating format@v6→@v7
Assessment: ✅ Looks Good
The update is correct, consistent, and complete. v7 retains Node 20 as the runtime and brings reliability fixes with no breaking changes to the usage patterns seen here.
Recurring Note (Pre-existing, Not Introduced by This PR)
All three prior reviews flagged the same pre-existing inconsistency: dotnet.yml uses fully-pinned versions (@v7.0.0) while speed-comparison.yml uses floating major versions (@v7). Standardizing on pinned versions across all workflow files would improve reproducibility and reduce supply-chain risk, but that is a separate concern from this PR.
Safe to merge.
cf7c2b5 to
f7b71ec
Compare
There was a problem hiding this comment.
Code Review: chore(deps): update actions/upload-artifact action to v7 (Review #5)
This PR has now been reviewed four times previously with no changes since. The assessment remains the same.
Summary
- 14 occurrences of
actions/upload-artifactupdated from v6 → v7 across two workflow files:.github/workflows/dotnet.yml(3 uses):@v6.0.0→@v7.0.0.github/workflows/speed-comparison.yml(11 uses):@v6→@v7
Assessment: ✅ Looks Good
The update is correct, consistent, and complete. No new issues to report.
Standing Pre-existing Note
All prior reviews flagged the inconsistency between pinned versions (@v7.0.0 in dotnet.yml) and floating major versions (@v7 in speed-comparison.yml). Standardizing on pinned versions would improve supply-chain security and reproducibility, but is a separate concern. This PR should be merged as-is.
Safe to merge.
This PR contains the following updates:
v6→v7v6.0.0→v7.0.0Release Notes
actions/upload-artifact (actions/upload-artifact)
v7Compare Source
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about these updates again.
This PR has been generated by Renovate Bot.