Skip to content

chore(actions): bump actions/upload-artifact from 7.0.1 to 7.0.2 - #74

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions/upload-artifact-7.0.2
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions/upload-artifact-7.0.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 14, 2026 •

Copy link
Copy Markdown
Contributor

Bumps actions/upload-artifact from 7.0.1 to 7.0.2.

Release notes

Sourced from actions/upload-artifact's releases.

v7.0.2

What's Changed

  • Improves artifact download retries when the service returns HTTP 429 (rate limiting), including honoring valid Retry-After headers.
  • Updates @​actions/artifact to v6.3.1.

New Contributors

Full Changelog: actions/upload-artifact@v7.0.1...v7.0.2

Commits
  • cf430e0 Merge pull request #822 from actions/tunc-d-prepare-upload-v7-0-2
  • c2acded chore: prepare v7.0.2 release
  • 4687c1b Merge pull request #821 from actions/tunc-d-upload-artifact-package-bump
  • 8cbe1be Bump @​actions/artifact to 6.3.1
  • See full diff in compare view

Copilot AI balanced review requested due to automatic review settings October 14, 2026 18:24
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 14, 2026
@dependabot dependabot Bot added the github_actions Pull requests that update GitHub Actions code label Oct 14, 2026

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟡 Changes recommended

Two existing workflow tests still require the previous action SHA and will fail until their expected pins are updated.

1 open finding
What changed in this PR

Updates actions/upload-artifact from v7.0.1 to v7.0.2 across test and release workflows.

Changes:

  • Updates 30 action references to the new commit SHA.
  • Preserves existing upload settings and workflow conditions.
File Description
.github/​workflows/​integration-test.yaml Updates test-results upload.
.github/​workflows/​e2e-test.yaml Updates results and acceptance uploads.
.github/​workflows/​ci.yaml Updates coverage upload.
.github/​workflows/​_workspace-distribution.yaml Updates workspace asset uploads.
.github/​workflows/​_siteops-distribution.yaml Updates build and attested asset uploads.
.github/​workflows/​_release-candidate.yaml Updates release artifact uploads.
.github/​workflows/​_fleet-reconcile.yaml Updates reconciliation outcome upload.
.github/​workflows/​_fleet-acceptance.yaml Updates fleet evidence uploads.
.github/​workflows/​_attestation-check.yaml Updates attestation evidence uploads.

🧠 Review effort: Balanced


💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

- name: Upload the build artifacts
id: upload
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions/upload-artifact-7.0.2 branch 2 times, most recently from a83d283 to d4524ee Compare October 21, 2026 02:22
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 7.0.1 to 7.0.2.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@043fb46...cf430e0)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: 7.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions/upload-artifact-7.0.2 branch from d4524ee to c8225b4 Compare October 21, 2026 16:20

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant