Skip to content

Bump actions/upload-artifact from 6 to 7#39

Merged
kernelsam merged 1 commit intomainfrom
dependabot/github_actions/actions/upload-artifact-7
Mar 19, 2026
Merged

Bump actions/upload-artifact from 6 to 7#39
kernelsam merged 1 commit intomainfrom
dependabot/github_actions/actions/upload-artifact-7

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 19, 2026

Bumps actions/upload-artifact from 6 to 7.

Release notes

Sourced from actions/upload-artifact's releases.

v7.0.0

v7 What's new

Direct Uploads

Adds support for uploading single files directly (unzipped). Callers can set the new archive parameter to false to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The name parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.

ESM

To support new versions of the @actions/* packages, we've upgraded the package to ESM.

What's Changed

New Contributors

Full Changelog: actions/upload-artifact@v6...v7.0.0

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Resolves #764
Resolves #762
Resolves #754
Resolves actions/upload-artifact#754
Resolves actions/upload-artifact#762
Resolves actions/upload-artifact#764

Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 6 to 7.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@v6...v7)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot requested a review from a team as a code owner March 19, 2026 19:26
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Mar 19, 2026
@github-actions
Copy link

🤖 Claude Code Review

Code Review

Summary

This PR bumps actions/upload-artifact from v6 to v7 across three workflow files.


Code Quality

Style guide - Workflow files follow consistent formatting.

No commented-out code - None present.

Meaningful variable names - N/A for this change.

DRY principle - The same version bump is applied consistently across all three workflow files (pytest-darwin.yaml, pytest-linux.yaml, pytest-windows.yaml).

No defects - Simple version bump, no logic errors or edge cases to consider.


Testing

No new functions - This is a dependency version bump only; no new test coverage required.


Documentation

README - No changes needed for a workflow dependency bump.

CHANGELOG - Not present in the diff, but acceptable for a minor dependency bump in CI workflows.

Inline comments - N/A.


Security

No hardcoded credentials - None present.

No sensitive data - N/A.

No license files - None present.


Overall Assessment

Approved. This is a clean, minimal change that upgrades actions/upload-artifact from v6 to v7 uniformly across all three CI platform workflows (Darwin, Linux, Windows). No concerns.

Automated code review analyzing defects and coding standards

@github-actions
Copy link

Coverage report

This PR does not seem to contain any modification to coverable code.

@github-actions
Copy link

Super-linter summary

Language Validation result
CHECKOV Pass ✅
GITHUB_ACTIONS Pass ✅
GITHUB_ACTIONS_ZIZMOR Pass ✅
GITLEAKS Pass ✅
GIT_MERGE_CONFLICT_MARKERS Pass ✅
JSCPD Pass ✅
PRE_COMMIT Pass ✅
SPELL_CODESPELL Pass ✅
TRIVY Pass ✅
YAML Pass ✅
YAML_PRETTIER Pass ✅

All files and directories linted successfully

For more information, see the GitHub Actions workflow run

Powered by Super-linter

@kernelsam kernelsam merged commit 1409420 into main Mar 19, 2026
56 checks passed
@kernelsam kernelsam deleted the dependabot/github_actions/actions/upload-artifact-7 branch March 19, 2026 20:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants