From 01ea7df0df551fa0614ab245b6bc5f0af95f913f Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 24 Jul 2025 20:55:20 +0000 Subject: [PATCH] chore(deps): bump actions/upload-artifact from 4.0.0 to 4.6.2 Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.0.0 to 4.6.2. - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/v4...ea165f8d65b6e75b540449e92b4886f43607fa02) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-version: 4.6.2 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- .github/workflows/publish.yml | 2 +- .github/workflows/scorecard.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index 44453832..9b025897 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -256,7 +256,7 @@ jobs: PRERELEASE: ${{ needs.state.outputs.is_prerelease }} - name: Upload tarball artifact - uses: actions/upload-artifact@c7d193f32edcb7bfad88892161225aeda64e9392 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 with: name: ${{ github.ref_name }} path: ${{ needs.provenance.outputs.package-name }} diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index e85980f3..cb8f4d87 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -48,7 +48,7 @@ jobs: # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF # format to the repository Actions tab. - name: 'Upload artifact' - uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4.4.0 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 with: name: SARIF file path: results.sarif