From 71fff1fe8d5673ce6d7bca70b7ba6d775b068e0d Mon Sep 17 00:00:00 2001 From: n1ckyb Date: Mon, 10 Aug 2026 00:28:06 +0100 Subject: [PATCH] chore(deps): bump actions/upload-artifact Rebuilt on the current RC. The branch previously carried an older ci.yml, and a pull_request run uses the workflow from the PR's own branch - so it ran a version that predated the no-token degrade handling and failed with '--from-parser-artifacts needs GH_TOKEN or GITHUB_TOKEN', which Dependabot PRs can never satisfy because they receive no repository secrets. Net change against the RC is the pinned SHA only. Co-Authored-By: Claude Opus 5 --- .github/workflows/publish.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index 57a8c75..b649473 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -229,7 +229,7 @@ jobs: --patterns "*.whl" - name: Upload dist artefacts - uses: actions/upload-artifact@6f51ac03b9356f520e9adb1b1b7802705f340c2b # v4.5.0 + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v4.5.0 with: name: dist-${{ matrix.artifact }} path: |