chore(deps): update actions/upload-artifact action to v7 #19

2026-09-15T00:52:10+02:00

Renovate commented

2026-09-15 00:52:10 +02:00

This PR contains the following updates:

Package	Type	Update	Change
actions/upload-artifact	action	major	`v4` → `v7`

Release Notes

actions/upload-artifact (actions/upload-artifact)

`v7.0.1`

Compare Source

What's Changed

Update the readme with direct upload details by @danwkennedy in #795
Readme: bump all the example versions to v7 by @danwkennedy in #796
Include changes in typespec/ts-http-runtime 0.3.5 by @yacaovsnc in #797

Full Changelog: https://github.com/actions/upload-artifact/compare/v7...v7.0.1

`v7.0.0`

Compare Source

v7 What's new

Direct Uploads

Adds support for uploading single files directly (unzipped). Callers can set the new archive parameter to false to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The name parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.

ESM

To support new versions of the @actions/* packages, we've upgraded the package to ESM.

What's Changed

Add proxy integration test by @Link- in #754
Upgrade the module to ESM and bump dependencies by @danwkennedy in #762
Support direct file uploads by @danwkennedy in #764

New Contributors

@Link- made their first contribution in #754

Full Changelog: https://github.com/actions/upload-artifact/compare/v6...v7.0.0

`v6.0.0`

Compare Source

v6 - What's new

[!IMPORTANT]
actions/upload-artifact@v6 now runs on Node.js 24 (runs.using: node24) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.

Node.js 24

This release updates the runtime to Node.js 24. v5 had preliminary support for Node.js 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.

What's Changed

Upload Artifact Node 24 support by @salmanmkc in #719
fix: update @actions/artifact for Node.js 24 punycode deprecation by @salmanmkc in #744
prepare release v6.0.0 for Node.js 24 support by @salmanmkc in #745

Full Changelog: https://github.com/actions/upload-artifact/compare/v5.0.0...v6.0.0

`v5.0.0`

Compare Source

What's Changed

BREAKING CHANGE: this update supports Node v24.x. This is not a breaking change per-se but we're treating it as such.

Update README.md by @GhadimiR in #681
Update README.md by @nebuk89 in #712
Readme: spell out the first use of GHES by @danwkennedy in #727
Update GHES guidance to include reference to Node 20 version by @patrikpolyak in #725
Bump @actions/artifact to v4.0.0
Prepare v5.0.0 by @danwkennedy in #734

New Contributors

@GhadimiR made their first contribution in #681
@nebuk89 made their first contribution in #712
@danwkennedy made their first contribution in #727
@patrikpolyak made their first contribution in #725

Full Changelog: https://github.com/actions/upload-artifact/compare/v4...v5.0.0

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/upload-artifact](https://github.com/actions/upload-artifact) | action | major | `v4` → `v7` | --- ### Release Notes <details> <summary>actions/upload-artifact (actions/upload-artifact)</summary> ### [`v7.0.1`](https://github.com/actions/upload-artifact/releases/tag/v7.0.1) [Compare Source](https://github.com/actions/upload-artifact/compare/v7...v7.0.1) ##### What's Changed - Update the readme with direct upload details by [@danwkennedy](https://github.com/danwkennedy) in [#795](https://github.com/actions/upload-artifact/pull/795) - Readme: bump all the example versions to v7 by [@danwkennedy](https://github.com/danwkennedy) in [#796](https://github.com/actions/upload-artifact/pull/796) - Include changes in typespec/ts-http-runtime 0.3.5 by [@yacaovsnc](https://github.com/yacaovsnc) in [#797](https://github.com/actions/upload-artifact/pull/797) **Full Changelog**: <https://github.com/actions/upload-artifact/compare/v7...v7.0.1> ### [`v7.0.0`](https://github.com/actions/upload-artifact/releases/tag/v7.0.0) [Compare Source](https://github.com/actions/upload-artifact/compare/v6.0.0...v7) ##### v7 What's new ##### Direct Uploads Adds support for uploading single files directly (unzipped). Callers can set the new `archive` parameter to `false` to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The `name` parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file. ##### ESM To support new versions of the `@actions/*` packages, we've upgraded the package to ESM. ##### What's Changed - Add proxy integration test by [@Link-](https://github.com/Link-) in [#754](https://github.com/actions/upload-artifact/pull/754) - Upgrade the module to ESM and bump dependencies by [@danwkennedy](https://github.com/danwkennedy) in [#762](https://github.com/actions/upload-artifact/pull/762) - Support direct file uploads by [@danwkennedy](https://github.com/danwkennedy) in [#764](https://github.com/actions/upload-artifact/pull/764) ##### New Contributors - [@Link-](https://github.com/Link-) made their first contribution in [#754](https://github.com/actions/upload-artifact/pull/754) **Full Changelog**: <https://github.com/actions/upload-artifact/compare/v6...v7.0.0> ### [`v6.0.0`](https://github.com/actions/upload-artifact/releases/tag/v6.0.0) [Compare Source](https://github.com/actions/upload-artifact/compare/v5.0.0...v6.0.0) ##### v6 - What's new > \[!IMPORTANT] > actions/upload-artifact\@v6 now runs on Node.js 24 (`runs.using: node24`) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading. ##### Node.js 24 This release updates the runtime to Node.js 24. v5 had preliminary support for Node.js 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24. ##### What's Changed - Upload Artifact Node 24 support by [@salmanmkc](https://github.com/salmanmkc) in [#719](https://github.com/actions/upload-artifact/pull/719) - fix: update [@actions/artifact](https://github.com/actions/artifact) for Node.js 24 punycode deprecation by [@salmanmkc](https://github.com/salmanmkc) in [#744](https://github.com/actions/upload-artifact/pull/744) - prepare release v6.0.0 for Node.js 24 support by [@salmanmkc](https://github.com/salmanmkc) in [#745](https://github.com/actions/upload-artifact/pull/745) **Full Changelog**: <https://github.com/actions/upload-artifact/compare/v5.0.0...v6.0.0> ### [`v5.0.0`](https://github.com/actions/upload-artifact/releases/tag/v5.0.0) [Compare Source](https://github.com/actions/upload-artifact/compare/v4.6.2...v5.0.0) ##### What's Changed **BREAKING CHANGE:** this update supports Node `v24.x`. This is not a breaking change per-se but we're treating it as such. - Update README.md by [@GhadimiR](https://github.com/GhadimiR) in [#681](https://github.com/actions/upload-artifact/pull/681) - Update README.md by [@nebuk89](https://github.com/nebuk89) in [#712](https://github.com/actions/upload-artifact/pull/712) - Readme: spell out the first use of GHES by [@danwkennedy](https://github.com/danwkennedy) in [#727](https://github.com/actions/upload-artifact/pull/727) - Update GHES guidance to include reference to Node 20 version by [@patrikpolyak](https://github.com/patrikpolyak) in [#725](https://github.com/actions/upload-artifact/pull/725) - Bump `@actions/artifact` to `v4.0.0` - Prepare `v5.0.0` by [@danwkennedy](https://github.com/danwkennedy) in [#734](https://github.com/actions/upload-artifact/pull/734) ##### New Contributors - [@GhadimiR](https://github.com/GhadimiR) made their first contribution in [#681](https://github.com/actions/upload-artifact/pull/681) - [@nebuk89](https://github.com/nebuk89) made their first contribution in [#712](https://github.com/actions/upload-artifact/pull/712) - [@danwkennedy](https://github.com/danwkennedy) made their first contribution in [#727](https://github.com/actions/upload-artifact/pull/727) - [@patrikpolyak](https://github.com/patrikpolyak) made their first contribution in [#725](https://github.com/actions/upload-artifact/pull/725) **Full Changelog**: <https://github.com/actions/upload-artifact/compare/v4...v5.0.0> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).

Renovate added 1 commit 2026-09-15 03:01:22 +02:00

chore(deps): update actions/upload-artifact action to v7

CI Tests / JS Unit Tests (push) Skipped

CI Tests / cross-check-mixed-sbom (sbom=false) (push) Skipped

CI Tests / cross-check-mixed-sbom (sbom=true) (push) Skipped

CI Tests / with-inbuild-sbom (sbom=true) (push) Skipped

CI Tests / without-inbuild-sbom (sbom=false) (push) Skipped

CI Tests / without-inbuild-sbom (sbom=true) (push) Skipped

CI Tests / with-inbuild-sbom (sbom=false) (push) Skipped

CI Tests / JS Unit Tests (pull_request) Successful in 8s

Details

Philipp/Global-Workflows: Pre-commit Lint (Scoped) / pre-commit (pull_request) Successful in 1m34s

Details

CI Tests / cross-check-mixed-sbom (sbom=false) (pull_request) Successful in 3m33s

Details

CI Tests / cross-check-mixed-sbom (sbom=true) (pull_request) Successful in 3m34s

Details

CI Tests / without-inbuild-sbom (sbom=false) (pull_request) Successful in 5m47s

Details

CI Tests / without-inbuild-sbom (sbom=true) (pull_request) Successful in 3m38s

Details

CI Tests / with-inbuild-sbom (sbom=false) (pull_request) Successful in 3m46s

Details

CI Tests / with-inbuild-sbom (sbom=true) (pull_request) Successful in 1m56s

Details

45fc314eab

Renovate force-pushed renovate/major-github-artifact-actions from 4385ea7eea to 45fc314eab

2026-09-15 03:01:22 +02:00

Compare

Philipp merged commit 2d58558b5a into main

2026-09-18 00:54:59 +02:00

Philipp deleted branch renovate/major-github-artifact-actions

2026-09-18 00:54:59 +02:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: Philipp/cve-differential#19