build(deps): bump actions/upload-artifact from 4.6.2 to 7.0.1#2657
build(deps): bump actions/upload-artifact from 4.6.2 to 7.0.1#2657dependabot[bot] wants to merge 1 commit intomasterfrom
Conversation
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.6.2 to 7.0.1. - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@ea165f8...043fb46) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
Up to standards ✅🟢 Issues
|
![codacy-production[bot]](https://avatars.githubusercontent.com/in/56611?s=60&v=4){kind=small}
There was a problem hiding this comment.
Pull Request Overview
This PR cannot be merged in its current state because it attempts to update actions/upload-artifact to a non-existent version (v7.0.1). The latest stable major version for this action is currently v4.
While Codacy indicates the PR is 'up to standards' from a static analysis perspective, the functional implementation is invalid. Additionally, any future major version updates beyond v4 must account for new requirements regarding Node.js 24 and specific GitHub Actions Runner versions (2.327.1+).
About this PR
- The release notes for recent major versions of this action specify a requirement for Node.js 24 and a minimum Actions Runner version of 2.327.1. If this project utilizes self-hosted runners, ensure they are updated to meet these specifications before attempting a major version bump.
Test suggestions
- Verify that the 'meta-descriptions' artifact is successfully uploaded during a CI run.
Prompt proposal for missing tests
Consider implementing these tests if applicable:
1. Verify that the 'meta-descriptions' artifact is successfully uploaded during a CI run.
TIP Improve review quality by adding custom instructions
TIP How was this review? Give us feedback
|
|
||
| - name: Upload meta descriptions artifact | ||
| uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 | ||
| uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 |
There was a problem hiding this comment.
🔴 HIGH RISK
The version v7.0.1 does not exist for actions/upload-artifact. The latest stable major version is v4. Referencing a non-existent version will cause the workflow to fail. Try running the following prompt in your coding agent: > Update the actions/upload-artifact version in .github/workflows/mkdocs.yml to the latest stable v4 release and use the corresponding commit SHA.
Bumps actions/upload-artifact from 4.6.2 to 7.0.1.
Release notes
Sourced from actions/upload-artifact's releases.
... (truncated)
Commits
043fb46Merge pull request #797 from actions/yacaovsnc/update-dependency634250cInclude changes in typespec/ts-http-runtime 0.3.5e454baaReadme: bump all the example versions to v7 (#796)74fad66Update the readme with direct upload details (#795)bbbca2dSupport direct file uploads (#764)589182cUpgrade the module to ESM and bump dependencies (#762)47309c9Merge pull request #754 from actions/Link-/add-proxy-integration-tests02a8460Add proxy integration testb7c566aMerge pull request #745 from actions/upload-artifact-v6-releasee516bc8docs: correct description of Node.js 24 support in READMEDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)