Skip to content

ci(deps): move both artifact actions to the same major together - #77

Merged
bgard68 merged 1 commit into
mainfrom
ci/artifact-actions-v7-v8
Aug 24, 2026
Merged

ci(deps): move both artifact actions to the same major together#77
bgard68 merged 1 commit into
mainfrom
ci/artifact-actions-v7-v8

Conversation

@bgard68

Copy link
Copy Markdown
Owner

Combines #70 (upload-artifact 4.6.2 → 7.0.1) and #68 (download-artifact 4.3.0 → 8.0.1) into one change.

test-suite.yml uploads coverage artifacts in two jobs and downloads them in a third. The artifact backend is not compatible across these majors, so merging either Dependabot PR on its own would leave main with a broken upload/download handoff until the other landed. Moving them together keeps main consistent at every commit.

SHAs verified against the tags and matched against what Dependabot proposed in #70 and #68.

Closes#70
Closes#68

upload-artifact 4.6.2 -> 7.0.1 and download-artifact 4.3.0 -> 8.0.1.
Dependabot raised these as #70 and #68. test-suite.yml uploads coverage
artifacts in two jobs and downloads them in a third, and the artifact
backend is not compatible across these majors — merging either PR alone
would leave main with a broken upload/download handoff until the other
landed. Combining them keeps main consistent at every commit.
The dependabot.yml grouping added in #76 makes this automatic from the
next run; this commit clears the pair already in flight.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
@github-actions

Copy link
Copy Markdown

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

PackageVersionScoreDetails
actions/actions/download-artifact 3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c🟢 5.1
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Maintained⚠️ 00 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Binary-Artifacts🟢 10no binaries found in the repo
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Security-Policy🟢 9security policy file detected
SAST🟢 10SAST tool is run on all commits
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
actions/actions/upload-artifact 043fb46d1a93c77aae656e7c1c64a875d1fc6a0a🟢 4.5
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Pinned-Dependencies⚠️ -1no dependencies found
Maintained⚠️ 00 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions⚠️ -1No tokens found
Dangerous-Workflow⚠️ -1no workflows found
Packaging⚠️ -1packaging workflow not detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Security-Policy⚠️ 0security policy file not detected
SAST🟢 10SAST tool is run on all commits
Branch-Protection⚠️ 0branch protection not enabled on development/release branches

Scanned Files

  • .github/workflows/test-suite.yml

@bgard68
bgard68 merged commit 038810e into mainAug 24, 2026
7 checks passed
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

@bgard68