Skip to content

chore(deps): update actions/upload-artifact action to v7#5015

Merged
thomhurst merged 1 commit intomainfrom
renovate/actions-upload-artifact-7.x
Feb 26, 2026
Merged

chore(deps): update actions/upload-artifact action to v7#5015
thomhurst merged 1 commit intomainfrom
renovate/actions-upload-artifact-7.x

Conversation

@thomhurst
Copy link
Owner

This PR contains the following updates:

Package Type Update Change
actions/upload-artifact action major v6v7
actions/upload-artifact action major v6.0.0v7.0.0

Release Notes

actions/upload-artifact (actions/upload-artifact)

v7

Compare Source


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

Copy link
Contributor

@claude claude bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review: chore(deps): update actions/upload-artifact action to v7

This is a straightforward Renovate bot dependency update upgrading actions/upload-artifact from v6 to v7 across two workflow files. The changes are correct and complete.

What's Changed

  • 14 occurrences of actions/upload-artifact updated from v6 → v7 across:
    • .github/workflows/dotnet.yml (3 uses): pinned format @v6.0.0@v7.0.0
    • .github/workflows/speed-comparison.yml (11 uses): floating format @v6@v7

Assessment: ✅ Looks Good

The update is consistent and covers all occurrences. actions/upload-artifact v7 moves from Node 20 to Node 20 (same runtime) but drops support for some older action runner versions and includes reliability improvements — a safe upgrade.

Minor Observation (Pre-existing, Not Introduced Here)

There's an inconsistency in version pinning strategy between the two files:

  • dotnet.yml uses fully-pinned versions (@v7.0.0) — more reproducible and secure
  • speed-comparison.yml uses floating major versions (@v7) — easier to get patches automatically but less deterministic

This isn't introduced by this PR, but it may be worth standardizing across both files in a future cleanup. The pinned-version approach (@v7.0.0) is generally preferred for security-sensitive CI workflows since it prevents unexpected behaviour from upstream patches.

Safe to merge.

Copy link
Contributor

@claude claude bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review: chore(deps): update actions/upload-artifact action to v7

This is a straightforward Renovate bot dependency update upgrading actions/upload-artifact from v6 to v7 across two workflow files.

Summary of Changes

  • 14 occurrences updated across two workflow files:
    • .github/workflows/dotnet.yml (3 uses): pinned format @v6.0.0@v7.0.0
    • .github/workflows/speed-comparison.yml (11 uses): floating format @v6@v7

Assessment: ✅ Looks Good

The update is consistent and covers all occurrences. No issues to flag.

Follow-up from Previous Review

My prior comment noted a pre-existing inconsistency in version pinning strategy between the two files (@v7.0.0 vs @v7). That inconsistency is still present but is out of scope for this PR. Standardizing to pinned versions (e.g. @v7.0.0) in speed-comparison.yml would improve reproducibility and security, and is worth a dedicated cleanup PR.

Safe to merge.

Copy link
Contributor

@claude claude bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review: chore(deps): update actions/upload-artifact action to v7

This is a Renovate bot dependency update upgrading actions/upload-artifact from v6 to v7.

Summary

  • 14 occurrences updated across two workflow files:
    • .github/workflows/dotnet.yml (3 uses): pinned format @v6.0.0@v7.0.0
    • .github/workflows/speed-comparison.yml (11 uses): floating format @v6@v7

Assessment: ✅ Looks Good

The update is consistent and complete — all occurrences have been updated. No regressions expected; v7 maintains Node 20 as the runtime and brings reliability fixes.

Ongoing Note (Pre-existing)

As noted in prior reviews, there's a pre-existing inconsistency in version pinning strategy between the two files (@v7.0.0 in dotnet.yml vs @v7 in speed-comparison.yml). This is out of scope for this PR but remains worth a dedicated cleanup to standardize on pinned versions for better reproducibility and security.

Safe to merge.

Copy link
Contributor

@claude claude bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review: chore(deps): update actions/upload-artifact action to v7

This is the fourth review pass on this Renovate bot PR. No new changes have been introduced since the last review.

Summary

  • 14 occurrences of actions/upload-artifact updated from v6 → v7 across two workflow files:
    • .github/workflows/dotnet.yml (3 uses): pinned format @v6.0.0@v7.0.0
    • .github/workflows/speed-comparison.yml (11 uses): floating format @v6@v7

Assessment: ✅ Looks Good

The update is correct, consistent, and complete. v7 retains Node 20 as the runtime and brings reliability fixes with no breaking changes to the usage patterns seen here.

Recurring Note (Pre-existing, Not Introduced by This PR)

All three prior reviews flagged the same pre-existing inconsistency: dotnet.yml uses fully-pinned versions (@v7.0.0) while speed-comparison.yml uses floating major versions (@v7). Standardizing on pinned versions across all workflow files would improve reproducibility and reduce supply-chain risk, but that is a separate concern from this PR.

Safe to merge.

@thomhurst thomhurst force-pushed the renovate/actions-upload-artifact-7.x branch from cf7c2b5 to f7b71ec Compare February 26, 2026 22:15
Copy link
Contributor

@claude claude bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review: chore(deps): update actions/upload-artifact action to v7 (Review #5)

This PR has now been reviewed four times previously with no changes since. The assessment remains the same.

Summary

  • 14 occurrences of actions/upload-artifact updated from v6 → v7 across two workflow files:
    • .github/workflows/dotnet.yml (3 uses): @v6.0.0@v7.0.0
    • .github/workflows/speed-comparison.yml (11 uses): @v6@v7

Assessment: ✅ Looks Good

The update is correct, consistent, and complete. No new issues to report.

Standing Pre-existing Note

All prior reviews flagged the inconsistency between pinned versions (@v7.0.0 in dotnet.yml) and floating major versions (@v7 in speed-comparison.yml). Standardizing on pinned versions would improve supply-chain security and reproducibility, but is a separate concern. This PR should be merged as-is.

Safe to merge.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file MAJOR renovate-bot

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants