Skip to content

Bump actions/upload-artifact from 6 to 7#528

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/github_actions/master/actions/upload-artifact-7
Closed

Bump actions/upload-artifact from 6 to 7#528
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/github_actions/master/actions/upload-artifact-7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Feb 27, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps actions/upload-artifact from 6 to 7.

Release notes

Sourced from actions/upload-artifact's releases.

v7.0.0

v7 What's new

Direct Uploads

Adds support for uploading single files directly (unzipped). Callers can set the new archive parameter to false to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The name parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.

ESM

To support new versions of the @actions/* packages, we've upgraded the package to ESM.

What's Changed

New Contributors

Full Changelog: actions/upload-artifact@v6...v7.0.0

Commits
  • 043fb46 Merge pull request #797 from actions/yacaovsnc/update-dependency
  • 634250c Include changes in typespec/ts-http-runtime 0.3.5
  • e454baa Readme: bump all the example versions to v7 (#796)
  • 74fad66 Update the readme with direct upload details (#795)
  • bbbca2d Support direct file uploads (#764)
  • 589182c Upgrade the module to ESM and bump dependencies (#762)
  • 47309c9 Merge pull request #754 from actions/Link-/add-proxy-integration-tests
  • 02a8460 Add proxy integration test
  • See full diff in compare view

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Feb 27, 2026
@github-actions

github-actions Bot commented Feb 27, 2026 •
edited
Loading

Copy link
Copy Markdown

❌MegaLinter analysis: Error

Descriptor Linter Files Fixed Errors Warnings Elapsed time
✅ ACTION actionlint 3 0 0 0.03s
❌ ACTION zizmor 3 1 0 0.38s
✅ JAVA checkstyle 112 0 0 7.39s
✅ MARKDOWN markdownlint 5 0 0 1.03s
✅ MARKDOWN markdown-table-formatter 5 0 0 0.32s
✅ REPOSITORY betterleaks yes no no 0.62s
✅ REPOSITORY checkov yes no no 23.91s
✅ REPOSITORY gitleaks yes no no 2.4s
✅ REPOSITORY git_diff yes no no 0.02s
✅ REPOSITORY grype yes no no 69.21s
✅ REPOSITORY osv-scanner yes no no 10.73s
✅ REPOSITORY secretlint yes no no 2.47s
✅ REPOSITORY syft yes no no 2.74s
✅ REPOSITORY trivy yes no no 16.68s
✅ REPOSITORY trivy-sbom yes no no 0.41s
✅ REPOSITORY trufflehog yes no no 9.41s
✅ YAML v8r 6 0 0 5.84s
✅ YAML yamllint 6 0 0 0.52s

Detailed Issues

❌ ACTION / zizmor - 1 error 
INFO zizmor: 🌈 zizmor v1.25.0
fatal: no audit was performed
'ref-confusion' audit failed on file://.github/workflows/maven_jdk8.yml

Caused by:
    0: error in 'ref-confusion' audit
    1: couldn't list branches for actions/checkout
    2: request error while accessing GitHub API
    3: HTTP status client error (401 Unauthorized) for url (https://github.com/actions/checkout.git/git-upload-pack)


[ACTION_ZIZMOR_ERROR_GITHUB_API_UNREACHABLE] Zizmor could not access a repository referenced by a `uses:` clause via the GitHub API (missing token, insufficient scope, or cross-repo private access).
To allow zizmor to authenticate with GITHUB_TOKEN (or a PAT with `Contents: read-only`), whitelist the variable in your .mega-linter.yml:
ACTION_ZIZMOR_UNSECURED_ENV_VARIABLES:
  - GITHUB_TOKEN
If the referenced workflow is in a private repo outside the current one, provide a PAT with cross-repo access instead of the default GITHUB_TOKEN, or run zizmor in offline mode.

Notices

📣 MegaLinter 9.5.0 is out! Discover the new features and security recommendations in the release announcement. (Skip this info by defining SECURITY_SUGGESTIONS: false)

See detailed reports in MegaLinter artifacts

Your project could benefit from a custom flavor, which would allow you to run only the linters you need, and thus improve runtime performances. (Skip this info by defining FLAVOR_SUGGESTIONS: false)

  • Documentation: Custom Flavors
  • Command: npx mega-linter-runner@9.6.0 --custom-flavor-setup --custom-flavor-linters ACTION_ACTIONLINT,ACTION_ZIZMOR,JAVA_CHECKSTYLE,MARKDOWN_MARKDOWNLINT,MARKDOWN_MARKDOWN_TABLE_FORMATTER,REPOSITORY_CHECKOV,REPOSITORY_GIT_DIFF,REPOSITORY_GITLEAKS,REPOSITORY_BETTERLEAKS,REPOSITORY_GRYPE,REPOSITORY_OSV_SCANNER,REPOSITORY_SECRETLINT,REPOSITORY_SYFT,REPOSITORY_TRIVY,REPOSITORY_TRIVY_SBOM,REPOSITORY_TRUFFLEHOG,YAML_YAMLLINT,YAML_V8R

MegaLinter is graciously provided by OX Security
Show us your support by starring ⭐ the repository

@ljacqu ljacqu self-assigned this Mar 13, 2026
@ljacqu

ljacqu commented Jul 16, 2026

Copy link
Copy Markdown
Member

@dependabot rebase

@dependabot
Bump actions/upload-artifact from 6 to 7
082f8b3 
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 6 to 7.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@v6...v7)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/master/actions/upload-artifact-7 branch from b0ae42d to 082f8b3 Compare July 16, 2026 17:36
@coveralls

coveralls commented Jul 16, 2026

Copy link
Copy Markdown

Coverage Status

coverage: 99.405%. remained the same — dependabot/github_actions/master/actions/upload-artifact-7 into master

@ljacqu
ljacqu changed the base branch from master to dependencies July 16, 2026 17:38
@ljacqu
ljacqu changed the base branch from dependencies to master July 16, 2026 17:48
@ljacqu

ljacqu commented Jul 16, 2026

Copy link
Copy Markdown
Member

@dependabot rebase please

@dependabot @github

dependabot Bot commented on behalf of github Jul 16, 2026

Copy link
Copy Markdown
Contributor Author

Looks like actions/upload-artifact is up-to-date now, so this is no longer needed.

@dependabot dependabot Bot closed this Jul 16, 2026
@dependabot
dependabot Bot deleted the dependabot/github_actions/master/actions/upload-artifact-7 branch July 16, 2026 18:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

@ljacqu ljacqu

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@ljacqu @coveralls