deps: Update actions/upload-artifact action to v7 by renovate[bot] · Pull Request #13 · ANcpLua/github-settings-automation

renovate · 2026-05-24T15:20:15Z

This PR contains the following updates:

Package	Type	Update	Change
actions/upload-artifact	action	major	`v4` → `v7`

Release Notes

actions/upload-artifact (actions/upload-artifact)

`v7.0.1`

Compare Source

What's Changed

Update the readme with direct upload details by @danwkennedy in #795
Readme: bump all the example versions to v7 by @danwkennedy in #796
Include changes in typespec/ts-http-runtime 0.3.5 by @yacaovsnc in #797

Full Changelog: actions/upload-artifact@v7...v7.0.1

`v7.0.0`

Compare Source

v7 What's new

Direct Uploads

Adds support for uploading single files directly (unzipped). Callers can set the new archive parameter to false to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The name parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.

ESM

To support new versions of the @actions/* packages, we've upgraded the package to ESM.

What's Changed

Add proxy integration test by @Link- in #754
Upgrade the module to ESM and bump dependencies by @danwkennedy in #762
Support direct file uploads by @danwkennedy in #764

New Contributors

@Link- made their first contribution in #754

Full Changelog: actions/upload-artifact@v6...v7.0.0

What's Changed

Update to use artifact 2.3.2 package & prepare for new upload-artifact release by @salmanmkc in #685

New Contributors

@salmanmkc made their first contribution in #685

Full Changelog: actions/upload-artifact@v4...v4.6.2

`v4.6.1`

Compare Source

What's Changed

Update to use artifact 2.2.2 package by @yacaovsnc in #673

Full Changelog: actions/upload-artifact@v4...v4.6.1

`v4.6.0`

Compare Source

What's Changed

Expose env vars to control concurrency and timeout by @yacaovsnc in #662

Full Changelog: actions/upload-artifact@v4...v4.6.0

`v4.5.0`

Compare Source

What's Changed

fix: deprecated Node.js version in action by @hamirmahal in #578
Add new artifact-digest output by @bdehamer in #656

New Contributors

@hamirmahal made their first contribution in #578
@bdehamer made their first contribution in #656

Full Changelog: actions/upload-artifact@v4.4.3...v4.5.0

`v4.4.3`

Compare Source

What's Changed

Undo indirect dependency updates from #627 by @joshmgross in #632

Full Changelog: actions/upload-artifact@v4.4.2...v4.4.3

`v4.4.2`

Compare Source

What's Changed

Bump @actions/artifact to 2.1.11 by @robherley in #627
- Includes fix for relative symlinks not resolving properly

Full Changelog: actions/upload-artifact@v4.4.1...v4.4.2

`v4.4.1`

Compare Source

What's Changed

Add a section about hidden files by @joshmgross in #607
Add workflow file for publishing releases to immutable action package by @Jcambass in #621
Update @actions/artifact to latest version, includes symlink and timeout fixes by @robherley in #625

New Contributors

@Jcambass made their first contribution in #621

Full Changelog: actions/upload-artifact@v4.4.0...v4.4.1

`v4.4.0`

Compare Source

Notice: Breaking Changes ⚠️

We will no longer include hidden files and folders by default in the upload-artifact action of this version. This reduces the risk that credentials are accidentally uploaded into artifacts. Customers who need to continue to upload these files can use a new option, include-hidden-files, to continue to do so.

See "Notice of upcoming deprecations and breaking changes in GitHub Actions runners" changelog and this issue for more details.

What's Changed

Exclude hidden files by default by @joshmgross in #598

Full Changelog: actions/upload-artifact@v4.3.6...v4.4.0

`v4.3.6`

Compare Source

What's Changed

Revert to @actions/artifact 2.1.8 by @robherley in #594

Full Changelog: actions/upload-artifact@v4...v4.3.6

`v4.3.5`

Compare Source

What's Changed

Bump @actions/artifact to v2.1.9 by @robherley in #588
- Fixed artifact upload chunk timeout logic #1774
- Use lazy stream to prevent issues with open file limits #1771

Full Changelog: actions/upload-artifact@v4.3.4...v4.3.5

`v4.3.4`

Compare Source

What's Changed

Update @actions/artifact version, bump dependencies by @robherley in #584

Full Changelog: actions/upload-artifact@v4.3.3...v4.3.4

`v4.3.3`

Compare Source

What's Changed

updating @actions/artifact dependency to v2.1.6 by @eggyhead in #565

Full Changelog: actions/upload-artifact@v4.3.2...v4.3.3

`v4.3.2`

Compare Source

What's Changed

Update release-new-action-version.yml by @konradpabjan in #516
Minor fix to the migration readme by @andrewakim in #523
Update readme with v3/v2/v1 deprecation notice by @robherley in #561
updating @actions/artifact dependency to v2.1.5 and @actions/core to v1.0.1 by @eggyhead in #562

New Contributors

@andrewakim made their first contribution in #523

Full Changelog: actions/upload-artifact@v4.3.1...v4.3.2

`v4.3.1`

Compare Source

Bump @actions/artifacts to latest version to include updated GHES host check

`v4.3.0`

Compare Source

What's Changed

Reorganize upload code in prep for merge logic & add more tests by @robherley in #504
Add sub-action to merge artifacts by @robherley in #505

Full Changelog: actions/upload-artifact@v4...v4.3.0

`v4.2.0`

Compare Source

What's Changed

Ability to overwrite an Artifact by @robherley in #501

Full Changelog: actions/upload-artifact@v4...v4.2.0

`v4.1.0`

Compare Source

What's Changed

Add migrations docs by @robherley in #482
Update README.md by @samuelwine in #492
Support artifact-url output by @konradpabjan in #496
Update readme to reflect new 500 artifact per job limit by @robherley in #497

New Contributors

@samuelwine made their first contribution in #492

Full Changelog: actions/upload-artifact@v4...v4.1.0

Configuration

📅 Schedule: (in timezone UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

codacy-production · 2026-05-24T15:20:52Z

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

AI Reviewer: first review requested successfully. AI can make mistakes. Always validate suggestions.

_{TIP This summary will be updated as you push new changes.}

codacy-production

Pull Request Overview

This PR attempts to update the actions/upload-artifact GitHub Action to version v7. However, according to the official GitHub Marketplace, the latest major version for this action is v4. Deploying this change as-is will cause the drift-check workflow to fail during execution.

While Codacy analysis indicates the code is otherwise 'up to standards', the invalid version reference is a blocking issue. Furthermore, the update introduces a breaking change from upstream version 4.4.0 where hidden files are now excluded by default. While your current configuration explicitly names the files to be uploaded, this behavior change should be noted for future maintenance.

About this PR

The actions/upload-artifact action introduced a breaking change in version 4.4.0 where hidden files (dotfiles) are excluded by default. While the current implementation explicitly lists 'drift-report.md' and 'drift-manifest.json', any future use of dotfiles in these paths will require the 'include-hidden-files' flag.

Test suggestions

Execute the workflow and verify that the 'drift-report' artifact is successfully created and contains both specified files.
Verify that the new v4.4.0 behavior (specifically the breaking change excluding hidden files) does not impact the current upload list.

Prompt proposal for missing tests

Consider implementing these tests if applicable:
1. Execute the workflow and verify that the 'drift-report' artifact is successfully created and contains both specified files.
2. Verify that the new v4.4.0 behavior (specifically the breaking change excluding hidden files) does not impact the current upload list.

_{TIP Improve review quality by adding custom instructions}
_{TIP How was this review? Give us feedback}

codacy-production · 2026-05-24T15:21:49Z

      - name: Upload report
        if: always()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7


_{🔴 HIGH RISK}

The actions/upload-artifact action does not have a v7 release. The latest stable major version is v4. Using a non-existent version will cause the workflow to fail.

Suggested change

uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7

uses: actions/upload-artifact@v4

deps: Update actions/upload-artifact action to v7

ba423f9

renovate Bot added dependencies major labels May 24, 2026

codacy-production Bot reviewed May 24, 2026

View reviewed changes

ANcpLua merged commit 0be16b2 into main May 24, 2026
5 of 6 checks passed

ANcpLua deleted the renovate/major-github-artifact-actions branch May 24, 2026 15:21

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

deps: Update actions/upload-artifact action to v7#13

deps: Update actions/upload-artifact action to v7#13
ANcpLua merged 1 commit into
mainfrom
renovate/major-github-artifact-actions

renovate Bot commented May 24, 2026

Uh oh!

codacy-production Bot commented May 24, 2026

Uh oh!

codacy-production Bot left a comment

Uh oh!

codacy-production Bot May 24, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

	uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
	uses: actions/upload-artifact@v4

Conversation

renovate Bot commented May 24, 2026

Release Notes

What's Changed

v7 What's new

Direct Uploads

ESM

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

New Contributors

Notice: Breaking Changes ⚠️

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

New Contributors

Configuration

Uh oh!

codacy-production Bot commented May 24, 2026

Up to standards ✅

Uh oh!

codacy-production Bot left a comment

Choose a reason for hiding this comment

Pull Request Overview

About this PR

Test suggestions

Uh oh!

codacy-production Bot May 24, 2026

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant