Repository navigation
build(deps): bump actions/upload-artifact from 7.0.1 to 7.0.2 - #2028
MarshallOfSound merged 1 commit into
Conversation
dependabot
Bot
added
dependencies
![claude[bot]](https://avatars.githubusercontent.com/in/1236702?s=60&v=4){kind=small}
There was a problem hiding this comment.
Looks good, straightforward dependency bump. Checked that all four actions/upload-artifact usages (check-download-links.yml and the three in release.yml) now pin the same new commit SHA cf430e0... with a matching "# v7.0.2" comment, consistent with the old 043fb46 / v7.0.1 pins.
Extended reasoning...
The diff only touches two GitHub Actions workflow files, replacing the pinned SHA for actions/upload-artifact (v7.0.1 -> v7.0.2) in four call sites, with each SHA change paired with a matching version comment. No workflow logic, permissions, secrets, or triggers changed. This is a routine Dependabot SHA-pin bump with no security-sensitive surface altered beyond trusting the new upstream commit, which is standard for such bumps.
|
coverage: 87.341%. remained the same — dependabot/github_actions/actions/upload-artifact-7.0.2 into main |
531ecd9 to
0949f2a
Compare
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 7.0.1 to 7.0.2. - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@043fb46...cf430e0) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-version: 7.0.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
0949f2a to
e253743
Compare
2 participants
Bumps actions/upload-artifact from 7.0.1 to 7.0.2.
Release notes
Sourced from actions/upload-artifact's releases.
Commits
cf430e0Merge pull request #822 from actions/tunc-d-prepare-upload-v7-0-2c2acdedchore: prepare v7.0.2 release4687c1bMerge pull request #821 from actions/tunc-d-upload-artifact-package-bump8cbe1beBump@actions/artifactto 6.3.1