Skip to content

Bump actions/upload-artifact from 4 to 7 - #14022

Merged
JanProvaznik merged 3 commits into
mainfrom
dependabot/github_actions/actions/upload-artifact-7
Jun 11, 2026
Merged

Bump actions/upload-artifact from 4 to 7#14022
JanProvaznik merged 3 commits into
mainfrom
dependabot/github_actions/actions/upload-artifact-7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 10, 2026

Copy link
Copy Markdown
Contributor

Context

Bumps actions/upload-artifact from v4 to v7 in .github/workflows/skill-validation.yml, pinned to a specific commit SHA for security.

Changes Made

  • Updated actions/upload-artifact from @v4 to @043fb46d1a93c77aae656e7c1c64a875d1fc6a0a (v7.0.1) in .github/workflows/skill-validation.yml

Testing

No functional changes; this is a GitHub Actions dependency update.

Notes

The action is pinned to the full commit SHA (043fb46d1a93c77aae656e7c1c64a875d1fc6a0a) rather than a mutable version tag, following security best practices.

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jun 10, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner June 10, 2026 15:55
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jun 10, 2026
@JanProvaznik

Copy link
Copy Markdown
Member

@copilot use the SHA instead

Co-authored-by: JanProvaznik <25267098+JanProvaznik@users.noreply.github.com>

Copilot AI commented Jun 10, 2026

Copy link
Copy Markdown
Contributor

@copilot use the SHA instead

Done in 6f2a59b — updated to actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1.

@JanProvaznik

Copy link
Copy Markdown
Member

validated the sha is correct

@JanProvaznik
JanProvaznik enabled auto-merge (squash) June 10, 2026 16:26
@JanProvaznik
JanProvaznik merged commit b3c7f68 into main Jun 11, 2026
12 of 15 checks passed
@JanProvaznik
JanProvaznik deleted the dependabot/github_actions/actions/upload-artifact-7 branch June 11, 2026 09:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants