Skip to content

Update actions/upload-artifact action to v7#125

Open
renovate[bot] wants to merge 1 commit intomainfrom
renovate/major-all-major-dependencies
Open

Update actions/upload-artifact action to v7#125
renovate[bot] wants to merge 1 commit intomainfrom
renovate/major-all-major-dependencies

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate Bot commented Mar 21, 2026

This PR contains the following updates:

Package Type Update Change
actions/upload-artifact action major v5.0.0v7.0.1

Release Notes

actions/upload-artifact (actions/upload-artifact)

v7.0.1

Compare Source

What's Changed

Full Changelog: actions/upload-artifact@v7...v7.0.1

v7.0.0

Compare Source

v7 What's new

Direct Uploads

Adds support for uploading single files directly (unzipped). Callers can set the new archive parameter to false to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The name parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.

ESM

To support new versions of the @actions/* packages, we've upgraded the package to ESM.

What's Changed

New Contributors

Full Changelog: actions/upload-artifact@v6...v7.0.0

v7

Compare Source

v6

Compare Source

v6.0.0

Compare Source


Configuration

📅 Schedule: (in timezone UTC)

  • Branch creation
    • "every weekend"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@greptile-apps
Copy link
Copy Markdown

greptile-apps Bot commented Mar 21, 2026

Greptile Summary

This PR bumps five major dependencies — the three core Docker GitHub Actions (docker/login-action v3→v4, docker/setup-buildx-action v3→v4, docker/build-push-action v6→v7), jdx/mise-actionv3→v4, and theelectron` npm package (40.8.0→41.0.2). All GitHub Actions remain correctly SHA-pinned with version comments.

Key points to be aware of:

  • Node 24 runtime requirement: All four updated GitHub Actions now use Node 24 as their runtime, requiring Actions Runner v2.327.1 or later. The workflows use GitHub-hosted ubuntu-latest runners, which are regularly updated and should satisfy this requirement.
  • docker/setup-buildx-action v4 removes deprecated inputs/outputs: The action is used without any with: block in this repo, so no impact.
  • docker/build-push-action v7 removes deprecated DOCKER_BUILD_NO_SUMMARY and DOCKER_BUILD_EXPORT_RETENTION_DAYS env vars: Neither is used anywhere in the repository.
  • Electron 41.0.0 breaking change: The release notes list one breaking change — cookie-changed events that were previously not emitted in all cases will now fire correctly. No cookie event usage was found in the TypeScript sources, so this is unlikely to affect the application.
  • The pnpm-lock.yaml integrity hash for electron has been updated consistently with the version bump.

Confidence Score: 5/5

  • This PR is safe to merge — all changes are straightforward dependency bumps with no breaking impact on the current codebase.
  • All actions remain SHA-pinned, no deprecated inputs or removed env vars are used, GitHub-hosted runners satisfy the new Node 24 runtime requirement, and the single electron breaking change (cookie events) has no corresponding usage in the codebase.
  • No files require special attention.

Important Files Changed

Filename Overview
.github/actions/setup-docker/action.yaml Updates docker/login-action (v3→v4), docker/setup-buildx-action (v3→v4), and docker/build-push-action (v6→v7) to their respective major releases; all actions are properly SHA-pinned, no deprecated inputs or removed env vars are used.
.github/actions/setup-native/action.yaml Updates jdx/mise-action from v3.6.1 to v4.0.0; SHA-pinned correctly, and the three inputs used (version, cache_key_prefix, github_token) remain valid in v4.
pnpm-workspace.yaml Bumps the electron catalog entry from 40.8.0 to 41.0.2; electron 41.0.0 carries one breaking change (cookie-changed event emission fix), though no cookie-event usage was found in the codebase.
pnpm-lock.yaml Lock file updated to reflect electron 40.8.0 → 41.0.2 with a new integrity hash; no other dependency changes.

Last reviewed commit: "Update all major dep..."

@renovate renovate Bot force-pushed the renovate/major-all-major-dependencies branch 2 times, most recently from f2a1706 to 55dab77 Compare March 29, 2026 17:38
@renovate renovate Bot force-pushed the renovate/major-all-major-dependencies branch 6 times, most recently from dad8661 to d964d09 Compare April 20, 2026 21:11
@renovate renovate Bot changed the title Update all major dependencies (major) Update actions/upload-artifact action to v7 Apr 20, 2026
@codecov
Copy link
Copy Markdown

codecov Bot commented Apr 20, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

@renovate renovate Bot force-pushed the renovate/major-all-major-dependencies branch from d964d09 to 4de4d75 Compare April 21, 2026 18:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants