From 47912d38ca9a6e438f6bdd0af8ff0052adecfc20 Mon Sep 17 00:00:00 2001
From: Asad Iqbal <asad.dsoft@gmail.com>
Date: Wed, 15 Jul 2026 16:59:04 +0500
Subject: [PATCH] ci: bump artifact actions to v7 (upload + download together)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Supersedes Dependabot #329, which bumped actions/upload-artifact 4→7 but
left actions/download-artifact@v4 in release.yml's publish job. GitHub
requires matching upload/download majors — a v7↔v4 pair breaks the
release artifact merge (download-artifact can't read v7-format uploads).
Bump all four refs together: upload-artifact in build.yml, mutation.yml,
release.yml, and download-artifact in release.yml. CI/release-only; no
CLI-binary change.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
---
 .github/workflows/build.yml    | 2 +-
 .github/workflows/mutation.yml | 2 +-
 .github/workflows/release.yml  | 4 ++--
 3 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 530a78ab..271a645c 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -285,7 +285,7 @@ jobs:
           "$BIN" dataset push --help >/dev/null
 
       - name: Upload binary as artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: tracebloc-${{ matrix.os }}-${{ matrix.arch }}
           path: dist/tracebloc-${{ matrix.os }}-${{ matrix.arch }}${{ matrix.ext }}
diff --git a/.github/workflows/mutation.yml b/.github/workflows/mutation.yml
index 0bc26267..118b4bbf 100644
--- a/.github/workflows/mutation.yml
+++ b/.github/workflows/mutation.yml
@@ -110,7 +110,7 @@ jobs:
 
       - name: Upload machine-readable report
         if: always()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: gremlins-report
           path: |
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 4e63cb11..027eafd1 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -153,7 +153,7 @@ jobs:
           cat "$BIN_NAME.sha256"
 
       - name: Upload per-matrix artifacts
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: dist-${{ matrix.os }}-${{ matrix.arch }}
           path: dist/
@@ -174,7 +174,7 @@ jobs:
           ref: ${{ inputs.ref || github.ref }}
 
       - name: Download all matrix artifacts
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v7
         with:
           path: dist/
           merge-multiple: true