Repository navigation
build(deps): Bump actions/upload-artifact from 7.0.1 to 7.0.2 - #150
Merged
jatmn merged 2 commits intoOct 19, 2026
Merged
Conversation
dependabot
Bot
added
dependencies
Owner
|
@dependabot rebase |
dependabot
Bot
force-pushed
the
dependabot/github_actions/actions/upload-artifact-7.0.2
branch
3 times, most recently
from
October 18, 2026 22:03
a8df280 to
de0761f
Compare
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 7.0.1 to 7.0.2. - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@043fb46...cf430e0) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-version: 7.0.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/github_actions/actions/upload-artifact-7.0.2
branch
from
October 18, 2026 23:33
de0761f to
e9e70e3
Compare
Synchronize the release action allowlist, cargo-dist configuration, and workflow overlay with the v7.0.2 pins already updated by Dependabot. This fixes action-policy rejection and generated release-workflow drift. Validation: bash scripts/ci-preflight.sh; workflow policy validator; generate-dist-workflow.sh and check-dist-workflow.sh. Both targeted regressions failed before the pin synchronization and pass afterward.
Owner
|
@pullfrog review |
![pullfrog[bot]](https://avatars.githubusercontent.com/in/1768019?s=60&v=4){kind=small}
There was a problem hiding this comment.
✅ No new issues found.
Reviewed changes Reviewed all eight changed files across both commits, including the artifact Action upgrade and its release-tooling integration.
- Workflow upgrade: Mutation, nightly, official-release, and recovery workflows consistently use the immutable
actions/upload-artifactv7.0.2 pin, which matches the upstream release; the Action inputs, defaults, and Node runtime are unchanged from v7.0.1. - Generation alignment: The release allowlist,
dist-workspace.toml, and workflow overlay use the same pin, with no remaining references to the old SHA found. - Focused validation:
release-please-policy-harness.shandcheck-dist-workflow.shpassed under Node24.20.0, confirming policy acceptance, byte-for-byte workflow regeneration, and the alternate upload overlay's safety. Current PR checks have no failures, including successful Source Checks and Windows jobs. - Local validation limit: The full source-check run could not be completed locally: the environment lacks
typos, and the synchronous retry returnedTool 'shell' timed out after 120000ms. No repository files were changed.
gpt-6.1-sol ｜ 𝕏
jatmn
deleted the
dependabot/github_actions/actions/upload-artifact-7.0.2
branch
October 19, 2026 01:07
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps actions/upload-artifact from 7.0.1 to 7.0.2.
Release notes
Sourced from actions/upload-artifact's releases.
Commits
cf430e0Merge pull request #822 from actions/tunc-d-prepare-upload-v7-0-2c2acdedchore: prepare v7.0.2 release4687c1bMerge pull request #821 from actions/tunc-d-upload-artifact-package-bump8cbe1beBump@actions/artifactto 6.3.1Release tooling alignment
The upload-artifact v7.0.2 pin is also synchronized in the release action allowlist, cargo-dist configuration, and workflow overlay. This fixes the policy rejection and prevents regeneration from restoring v7.0.1. The generated release workflow reproduces exactly.
Validation: both existing policy and generation checks failed before the synchronization and passed afterward. Full
bash scripts/ci-preflight.shpassed, including 996 tests, Clippy, Dylint, build, documentation, CLI smoke, release/recovery harnesses, and cargo-deny. The unchanged dependency audit reports nine advisories, non-blocking under repository policy. No Rust diff requires mutation tests. Duplicate/overlapping upload-artifact updates checked; none found.Reviewed and pushed repair commit:
a941c0e8aad08c79737e1454d2849d0d0402ac5c.