From c7617877899f83e45f2baaebb32d7febc724b69c Mon Sep 17 00:00:00 2001 From: Nickolas Dimitrakas Date: Mon, 13 Apr 2026 10:23:15 -0400 Subject: [PATCH] ci: upgrade and pin actions/upload-artifact to v7.0.1 Upgrades all three upload-artifact usages from @v4 / unpinned @v7 to a SHA-pinned @v7.0.1 (Node.js 24) to eliminate GitHub's deprecated Node.js 20 runner warnings and ensure supply-chain integrity. Co-Authored-By: Claude Sonnet 4.6 --- .github/workflows/cross-platform-tests.yml | 2 +- .github/workflows/integration-tests.yml | 2 +- .github/workflows/release-publish.yml | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/cross-platform-tests.yml b/.github/workflows/cross-platform-tests.yml index 2ade257ed..b5f336e27 100644 --- a/.github/workflows/cross-platform-tests.yml +++ b/.github/workflows/cross-platform-tests.yml @@ -40,7 +40,7 @@ jobs: run: ./gradlew runIos - name: Archive Test Results if: always() - uses: actions/upload-artifact@v7 + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 with: name: ios-test-results path: Users/runner/Library/Developer/Xcode/DerivedData diff --git a/.github/workflows/integration-tests.yml b/.github/workflows/integration-tests.yml index 311bc55f8..823306ff3 100644 --- a/.github/workflows/integration-tests.yml +++ b/.github/workflows/integration-tests.yml @@ -99,7 +99,7 @@ jobs: - name: Upload artifacts on failure if: failure() - uses: actions/upload-artifact@v7 + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 with: name: integration-test-artifacts path: ${{ env.WORKING_DIRECTORY }}/artifacts/ diff --git a/.github/workflows/release-publish.yml b/.github/workflows/release-publish.yml index c9bcf9f8e..438c18c1a 100644 --- a/.github/workflows/release-publish.yml +++ b/.github/workflows/release-publish.yml @@ -200,7 +200,7 @@ jobs: rm -rf archives - name: Upload xcframework artifacts - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 with: name: xcframework-${{ matrix.kit.name }} path: xcframeworks/*.xcframework.zip