chore(deps): update actions/upload-artifact action to v7 - #593
chore(deps): update actions/upload-artifact action to v7#593renovate[bot] wants to merge 2 commits into
Conversation
renovate
Bot
added
the
🗡️ dependencies
OpenCode Dependabot Risk ReviewSchema: Decision: SummaryRenovate PR updates actions/upload-artifact from v4 to v7 (major). Changed files include .github/workflows/ci.yml and three generated stack files (stacks/infrastructure.yml, stacks/observability.yml, stacks/platform.yml) without any matching source Compose or fragment changes. This is a semver major update in the github-actions ecosystem, a workflow file is modified, and generated stacks are changed without corresponding source changes — all of which independently trigger non-approve conditions. Changed runtime artifactsNo runtime image changes detected. Runtime impactWorkflow execution may fail if the runner version is insufficient or if the new direct-upload API changes artifact handling. Stack files changed without source modifications indicate a potential regeneration issue that could affect deployment. Breaking change assessmentactions/upload-artifact v7 introduces breaking changes: ESM module upgrade, direct upload support (archive parameter), and requires Node.js 24 runtime. The v6 release notes also indicate a minimum Actions Runner version of 2.327.1 is required. Required checks
Manual follow-up
Sources checked
|
|
OpenCode risk gate: neutral. Manual review required. Risk: medium. Reason: Renovate PR updates actions/upload-artifact from v4 to v7 (major jump skipping v5 and v6). The update touches .github/workflows/ci.yml and includes breaking changes: Node.js 24 runtime requirement (runner >= 2.327.1), ESM module upgrade, and new direct-upload (unzipped) behavior. Per policy, github-actions major updates and workflow file changes trigger a neutral decision. |
![anitrend[bot]](https://avatars.githubusercontent.com/in/1138631?s=60&v=4){kind=small}
There was a problem hiding this comment.
OpenCode risk gate: changes requested. Risk: high. Reason: Renovate PR updates actions/upload-artifact from v4 to v7 (major). Changed files include .github/workflows/ci.yml and three generated stack files (stacks/infrastructure.yml, stacks/observability.yml, stacks/platform.yml) without any matching source Compose or fragment changes. This is a semver major update in the github-actions ecosystem, a workflow file is modified, and generated stacks are changed without corresponding source changes — all of which independently trigger non-approve conditions.
Edited/Blocked NotificationRenovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR. You can manually request rebase by checking the rebase/retry box above. |
This PR contains the following updates:
v4→v7Release Notes
actions/upload-artifact (actions/upload-artifact)
v7.0.1Compare Source
What's Changed
Full Changelog: actions/upload-artifact@v7...v7.0.1
v7.0.0Compare Source
v7 What's new
Direct Uploads
Adds support for uploading single files directly (unzipped). Callers can set the new
archiveparameter tofalseto skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. Thenameparameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.ESM
To support new versions of the
@actions/*packages, we've upgraded the package to ESM.What's Changed
New Contributors
Full Changelog: actions/upload-artifact@v6...v7.0.0
v7Compare Source
v6.0.0Compare Source
v6 - What's new
Node.js 24
This release updates the runtime to Node.js 24. v5 had preliminary support for Node.js 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.
What's Changed
Full Changelog: actions/upload-artifact@v5.0.0...v6.0.0
v6Compare Source
v5.0.0Compare Source
What's Changed
BREAKING CHANGE: this update supports Node
v24.x. This is not a breaking change per-se but we're treating it as such.@actions/artifacttov4.0.0v5.0.0by @danwkennedy in #734New Contributors
Full Changelog: actions/upload-artifact@v4...v5.0.0
v5Compare Source
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.