Skip to content

build(deps): bump actions/upload-artifact from 7.0.1 to 7.0.2 in the github-actions group - #460

Merged
airmang merged 2 commits into
mainfrom
dependabot/github_actions/github-actions-dc5ed02c9f
Oct 12, 2026
Merged

airmang merged 2 commits into
mainfrom
dependabot/github_actions/github-actions-dc5ed02c9f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 11, 2026

Copy link
Copy Markdown
Contributor

Bumps the github-actions group with 1 update: actions/upload-artifact.

Updates actions/upload-artifact from 7.0.1 to 7.0.2

Release notes

Sourced from actions/upload-artifact's releases.

v7.0.2

What's Changed

  • Improves artifact download retries when the service returns HTTP 429 (rate limiting), including honoring valid Retry-After headers.
  • Updates @​actions/artifact to v6.3.1.

New Contributors

Full Changelog: actions/upload-artifact@v7.0.1...v7.0.2

Commits
  • cf430e0 Merge pull request #822 from actions/tunc-d-prepare-upload-v7-0-2
  • c2acded chore: prepare v7.0.2 release
  • 4687c1b Merge pull request #821 from actions/tunc-d-upload-artifact-package-bump
  • 8cbe1be Bump @​actions/artifact to 6.3.1
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the github-actions group with 1 update: [actions/upload-artifact](https://github.com/actions/upload-artifact).


Updates `actions/upload-artifact` from 7.0.1 to 7.0.2
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@043fb46...cf430e0)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: 7.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from airmang as a code owner October 11, 2026 20:34
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Oct 11, 2026
…v7.0.2

cf430e030ddbb5b0abf93d22962f4752f3646cd9 is the v7.0.2 tag commit, four commits after v7.0.1: action.yml is unchanged and the dist bundles add no URL, environment variable or module (artifact download retries on HTTP 429).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@airmang

airmang commented Oct 12, 2026

Copy link
Copy Markdown
Owner

리뷰 결과: 병합합니다.

  • cf430e030ddbb5b0abf93d22962f4752f3646cd9는 actions/upload-artifact의 v7.0.2 태그 커밋이고 v7.0.1에서 4커밋 앞섭니다. action.yml은 바뀌지 않았고, 실행되는 dist/upload·dist/merge 묶음에서 외부 URL·process.env 이름·require 모듈·child_process 사용이 그대로입니다(429 응답 재시도 개선, @actions/artifact 6.3.1).
  • 동결된 릴리스 단계(EXPECTED_RELEASE_STEPS)를 같은 변경에서 새 SHA로 고쳤습니다(1d8ee34). tests/test_release_workflow_safety.py 56건 통과, CI 13/13.

@airmang
airmang merged commit 613e356 into main Oct 12, 2026
13 checks passed
@airmang
airmang deleted the dependabot/github_actions/github-actions-dc5ed02c9f branch October 12, 2026 02:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant