Skip to content

build(deps): bump actions/upload-artifact from 4 to 7 - #51

Merged
accesswatch merged 1 commit into
mainfrom
dependabot/github_actions/actions/upload-artifact-7
May 31, 2026
Merged

build(deps): bump actions/upload-artifact from 4 to 7#51
accesswatch merged 1 commit into
mainfrom
dependabot/github_actions/actions/upload-artifact-7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 31, 2026

Copy link
Copy Markdown
Contributor

Bumps actions/upload-artifact from 4 to 7.

Release notes

Sourced from actions/upload-artifact's releases.

v7.0.0

v7 What's new

Direct Uploads

Adds support for uploading single files directly (unzipped). Callers can set the new archive parameter to false to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The name parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.

ESM

To support new versions of the @actions/* packages, we've upgraded the package to ESM.

What's Changed

New Contributors

Full Changelog: actions/upload-artifact@v6...v7.0.0

v6.0.0

v6 - What's new

[!IMPORTANT] actions/upload-artifact@v6 now runs on Node.js 24 (runs.using: node24) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.

Node.js 24

This release updates the runtime to Node.js 24. v5 had preliminary support for Node.js 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.

What's Changed

Full Changelog: actions/upload-artifact@v5.0.0...v6.0.0

v5.0.0

What's Changed

BREAKING CHANGE: this update supports Node v24.x. This is not a breaking change per-se but we're treating it as such.

... (truncated)

Commits
  • 043fb46 Merge pull request #797 from actions/yacaovsnc/update-dependency
  • 634250c Include changes in typespec/ts-http-runtime 0.3.5
  • e454baa Readme: bump all the example versions to v7 (#796)
  • 74fad66 Update the readme with direct upload details (#795)
  • bbbca2d Support direct file uploads (#764)
  • 589182c Upgrade the module to ESM and bump dependencies (#762)
  • 47309c9 Merge pull request #754 from actions/Link-/add-proxy-integration-tests
  • 02a8460 Add proxy integration test
  • b7c566a Merge pull request #745 from actions/upload-artifact-v6-release
  • e516bc8 docs: correct description of Node.js 24 support in README
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4 to 7.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@v4...v7)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Dependency and supply-chain updates. security Security hardening and vulnerability-related work. labels May 31, 2026
@accesswatch
accesswatch merged commit 635505a into main May 31, 2026
1 of 3 checks passed
@dependabot
dependabot Bot deleted the dependabot/github_actions/actions/upload-artifact-7 branch May 31, 2026 20:01
accesswatch added a commit that referenced this pull request Jun 21, 2026
…izard from reopening on every launch (#647)

#622: when QUILL hits an unhandled exception, the excepthook now writes the
local traceback file as before, then offers the user a new CrashReportDialog
that previews a redacted summary (last 10 commands, active document
characteristics, platform/screen-reader info, last 12 traceback frames) and
asks for free-text context. The user keeps the final say: Send report calls
quill.core.issue_submit.submit_crash_issue with a configured GitHub token;
Copy to clipboard puts the redacted body on the system clipboard; Dont
send (the default button, also bound to Escape) preserves the local file
and submits nothing. Every free-text field is re-run through
quill.stability.redaction.redact_text_for_bundle before it leaves the
machine; document paths in the snapshot are hashed via the existing
include_file_paths=False contract. A new auto_ask_crash_submit setting
(defaults to True during the beta phase) controls whether the dialog
appears. The local traceback file is always written, and the native
ctypes MessageBoxW from finding #51 remains the always-on fallback when
wx is unavailable, no App is running, the setting is off, or the dialog
path raises.

#647: the consumed new-install marker sentinel in
_maybe_run_first_run_onboarding now records the markers resolved path
alongside the mtime. The #44 fix used mtime as the identity, but the
markers mtime can drift between launches (antivirus touches, filesystem
mtime updates, installer rewrites at the same path) and that caused the
wizard to reopen on every launch. The path is the stable identity for a
given install, so a marker at a known path is treated as already consumed
regardless of mtime; a marker at a different path still resets the
wizard for genuinely new installs.

New / changed files:
- quill/stability/crash_submit.py (new, 287 lines): pure / wx-free
  builder for the redacted crash-report payload, last-commands list,
  environment info, and active-document snapshot.
- quill/ui/crash_report_dialog.py (new, 337 lines): wx modal with the
  redacted preview, three free-text fields, three buttons, and the
  apply_modal_ids / _show_modal_dialog contract. Parent is the real
  wx.Frame, not the MainFrame mixin.
- quill/__main__.py: _install_excepthook rewritten as a coordinator
  (always writes the local file, schedules the dialog via wx.CallAfter,
  falls back to the native MessageBoxW). New best-effort helpers
  _try_offer_crash_submit, _active_document_snapshot,
  _find_main_frame_window, _copy_to_clipboard, and a module-level
  quill_main_load_settings indirection for monkeypatching.
- quill/core/settings.py and quill/core/settings_specs.py: new
  auto_ask_crash_submit setting (bool, default True) + SettingSpec.
- quill/ui/main_frame.py: path-aware marker sentinel for #647.
- quill/tools/network_egress_audit.py, module_size_budgets.json,
  dialog_inventory.json: gates updated.
- tests/unit/stability/test_crash_submit.py (24 tests),
  tests/unit/ui/test_crash_report_dialog.py (10 tests),
  tests/unit/test_excepthook_integration.py (16 tests),
  tests/unit/ui/test_startup_onboarding_hardening.py (3 new tests for
  #647 plus the existing #44 test): all green.
- docs/release notes/release0.7.0-beta2.{md,html,epub},
  docs/user guide/userguide.{md,html,epub},
  docs/Product Requirement Documents and Specifications/QUILL-PRD.{md,html,epub},
  docs/CONTROL_REFERENCE.{md,html,epub}: regenerated via pandoc and the
  docs builder. New "Crash reports offer to submit" section in the
  release notes and PRD; new "When QUILL crashes" subsection in the
  user guide; the existing "Setup Wizard no longer reappears" entry is
  tightened to mention mtime drift.

Gates: pytest (93 in the affected files), ruff check, ruff format
--check, mypy quill/core quill/io (pre-existing errors in
brf_page_detection.py untouched per user), module-size budget,
network-egress audit, dialog inventory, dialog button contract,
banned-patterns -- all green.

Closes #622. Fixes #647.

Co-Authored-By: Claude <noreply@anthropic.com>
accesswatch added a commit that referenced this pull request Jul 10, 2026
/#55/#59) (#933)

Five no-Mac-hardware-safe fixes from docs/planning/review.md, lowest-to-highest
priority. Verified by ruff + targeted unit tests; GATE-11 size budget rebaselined.

- #11 tray terminology: the six minimize/restore status messages now say
  "menu bar" on darwin instead of "system tray" (the feature renders as a
  menu-bar status item on macOS) via a module-level _TRAY_NOUN constant read
  once at import and applied at six _set_status call sites in main_frame.py.
- #37 default-folder hint: the Settings blank-default hint now shows a
  /Users/... example on darwin instead of a Windows C:\Users\... path (the
  only C:\Users hint in the tree); partial -- a broader dialog-terminology
  sweep remains.
- #55 install-complete crash guard: EnginesPanel._after_install now wraps all
  four post-install widget calls against a destroyed-panel RuntimeError, not
  just the Set Up button re-enable, so closing the AI Hub mid-install is a
  clean no-op regardless of which widget tears down last.
- #59 bundled-tool paths: external_tools.bundled_subpath values now use forward
  slashes so Path() composes on darwin (a backslash is a literal filename char
  there, not a separator, so the bundled binary was never found).
- #12 dead clipboard module: quill/platform/windows/clipboard.py (zero callers)
  gets an explicit DEAD-CODE docstring noting a revival needs a macOS
  NSPasteboard counterpart (it degrades to plain text on macOS today).

Tests: test_bundled_subpaths_use_forward_slashes_for_cross_platform_path_composition
(#59) and test_after_install_survives_a_destroyed_status_label (#55, a later
widget, not the button). #11/#37 are thin platform-branch string edits in the
27k-line wx-importing main_frame.py; a unit test would need a heavy, brittle
module reload, so they are verified by ruff + inspection instead.

main_frame.py 27534 -> 27542 (+8); budget rebaselined with a
_rebaseline_2026_07_10_macos_low_hanging_fruit comment. #38 and #51 deferred
(need Mac hardware); #40 closed (premise false -- Ctrl+Alt+Shift+ chords and
Alt+Shift+D are actively routed). Docs updated: PRD, CHANGELOG, release notes
beta2, userguide (with regenerated HTML/EPUB artifacts).

Co-authored-by: Claude <noreply@anthropic.com>
accesswatch added a commit that referenced this pull request Jul 10, 2026
…chord (#935)

Five more no-Mac-hardware-safe fixes from the macOS platform review
(docs/planning/review.md), worked lowest-to-highest priority:

- #46: MathCAT is no longer offered on macOS — like DECtalk, its only
  backend is a Windows .dll (libmathcat_c.dll); gated Windows-only in the
  optional-components catalog alongside DECtalk (pure platform-branch
  relocation; no new public surface).
- #60/#73: the macOS `security` CLI passes the keychain secret as
  `-w <secret>` in separate argv, and a short/non-hex secret slipped past
  the per-arg redaction into the diagnostics log; format_args_for_log now
  redacts the value following `-w` explicitly before the generic per-arg
  pass.
- #38 (tester-pending): persona_launcher now writes a Finder-launchable
  .command shell script (shebang + exec + chmod 0o755) on darwin instead
  of a useless .bat (Finder runs .command files in Terminal).
- #51 (tester-pending): the Simple File Open dialog's "toggle hidden
  files" chord is now Cmd+Shift+. on macOS (Finder convention) instead of
  Ctrl+H (the system Hide shortcut), via a platform-aware helper shared
  by the path-field and list key handlers.
- #64/#77 (tester-pending): eSpeak synthesis pipes very long input
  (>8000 chars) via --stdin instead of a trailing argv element that can
  overflow the OS command-line length (Windows ~32,767) and truncate/abort
  a very long Read Aloud span with no clear error.

#46 and #60/#73 are fully closed; #38/#51/#64/#77 are code-complete and
unit-tested here but only show their effect on real macOS hardware, so
they're closed pending tester validation (reopenable via Help > Report a
Bug). GATE-11 rebaselined: optional_components.py 850->852 (+2),
simple_open_dialog.py 500->503 (+3). Docs (PRD/release notes/userguide/
CHANGELOG) updated; HTML/EPUB artifacts regenerated.

Co-authored-by: Claude <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Dependency and supply-chain updates. security Security hardening and vulnerability-related work.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant