Skip to content

Pin upload-artifact to v7.0.1 and download-artifact to v8.0.1#92757

Merged
mmastrac merged 1 commit into
canaryfrom
mmastrac/pin-artifact-actions
Apr 14, 2026
Merged

Pin upload-artifact to v7.0.1 and download-artifact to v8.0.1#92757
mmastrac merged 1 commit into
canaryfrom
mmastrac/pin-artifact-actions

Conversation

@mmastrac
Copy link
Copy Markdown
Contributor

@mmastrac mmastrac commented Apr 13, 2026 •
edited
Loading

What

  • Pin all actions/upload-artifact references to v7.0.1 (043fb46d1a93c77aae656e7c1c64a875d1fc6a0a)
  • Pin all actions/download-artifact references to v8.0.1 (3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c)

@mmastrac
Pin upload-artifact to v7.0.1 and download-artifact to v8.0.1
1179cc0 
Pin all actions/upload-artifact and actions/download-artifact references
to the latest versions with full commit SHA hashes for supply chain
security.
@nextjs-bot nextjs-bot added the created-by: Turbopack team PRs by the Turbopack team. label Apr 13, 2026
@mmastrac mmastrac mentioned this pull request Apr 14, 2026
Draft
@mmastrac Graphite App
Copy link
Copy Markdown
Contributor Author

mmastrac commented Apr 14, 2026 •
edited
Loading

This stack of pull requests is managed by Graphite. Learn more about stacking.

@mmastrac mmastrac mentioned this pull request Apr 14, 2026
Merged
@mmastrac mmastrac enabled auto-merge (squash) April 14, 2026 00:22
@nextjs-bot
Copy link
Copy Markdown
Contributor

nextjs-bot commented Apr 14, 2026

Stats from current PR

✅ No significant changes detected

📊 All Metrics
📖 Metrics Glossary

Dev Server Metrics:

  • Listen = TCP port starts accepting connections
  • First Request = HTTP server returns successful response
  • Cold = Fresh build (no cache)
  • Warm = With cached build artifacts

Build Metrics:

  • Fresh = Clean build (no .next directory)
  • Cached = With existing .next directory

Change Thresholds:

  • Time: Changes < 50ms AND < 10%, OR < 2% are insignificant
  • Size: Changes < 1KB AND < 1% are insignificant
  • All other changes are flagged to catch regressions

⚡ Dev Server

Metric Canary PR Change Trend
Cold (Listen) 456ms 456ms ✓ █▁▁██
Cold (Ready in log) 445ms 446ms ✓ ▆▅█▅▂
Cold (First Request) 1.080s 1.114s ✓ ▁█▁▁█
Warm (Listen) 457ms 457ms ✓ ▁█▁▁▁
Warm (Ready in log) 446ms 444ms ✓ ▁▇▄▂▄
Warm (First Request) 346ms 351ms ✓ ▁█▅▃▅
📦 Dev Server (Webpack) (Legacy)

📦 Dev Server (Webpack)

Metric Canary PR Change Trend
Cold (Listen) 456ms 455ms ✓ ▅█▁▅▅
Cold (Ready in log) 437ms 438ms ✓ ▃▁▆▅▃
Cold (First Request) 1.891s 1.866s ✓ ▁▁▄▄▂
Warm (Listen) 455ms 455ms ✓ █▅▅▅▁
Warm (Ready in log) 436ms 438ms ✓ ▃▁█▅▃
Warm (First Request) 1.889s 1.874s ✓ ▁▁▇▆▅

⚡ Production Builds

Metric Canary PR Change Trend
Fresh Build 3.901s 3.923s ✓ ▆▂▆▆▃
Cached Build 3.853s 3.891s ✓ ▅▄▇▅▂
📦 Production Builds (Webpack) (Legacy)

📦 Production Builds (Webpack)

Metric Canary PR Change Trend
Fresh Build 14.498s 14.459s ✓ ▁▂▅▅▄
Cached Build 14.595s 14.582s ✓ ▁▁▇▅▁
node_modules Size 493 MB 493 MB ✓ █████
📦 Bundle Sizes

Bundle Sizes

⚡ Turbopack

Client

Main Bundles
Canary PR Change
003q3zf-_j90o.js gzip 154 B N/A -
053b9v5j96uu_.js gzip 8.56 kB N/A -
07rxhp_1_g4mu.js gzip 13.1 kB N/A -
096aa2uod0_wa.js gzip 9.82 kB N/A -
0cz1d0mv5g_q7.js gzip 39.4 kB 39.4 kB ✓
0ea8vo2o6kp_s.js gzip 13.3 kB N/A -
0egovw6-5i1e3.js gzip 8.57 kB N/A -
0ek_k55_6bo3v.js gzip 156 B N/A -
0fli3_wppnim5.js gzip 12.9 kB N/A -
0i-rrmz-wd2gx.js gzip 156 B N/A -
0k09jwjeb-tki.js gzip 13.8 kB N/A -
0kb7_ep3r1z0_.js gzip 10.1 kB N/A -
0kmgih16pb2zy.js gzip 9.24 kB N/A -
0wxpyd8r-vipl.js gzip 1.47 kB N/A -
16lhqjoqbznyg.js gzip 220 B 220 B ✓
16vepdkipri3r.js gzip 8.51 kB N/A -
17n96uu6y1pxq.js gzip 8.6 kB N/A -
1cml77k0cjco9.js gzip 168 B N/A -
1elt1qium-r2m.css gzip 115 B 115 B ✓
1ldzw5bsf3-0l.js gzip 158 B N/A -
1rk604e6mevef.js gzip 158 B N/A -
1wj60c-jqsx-n.js gzip 65.5 kB N/A -
1xz7fhgdco-x_.js gzip 8.59 kB N/A -
2__-e_ym8n788.js gzip 450 B N/A -
22o6xd9_ywdu6.js gzip 233 B N/A -
298segop7mz8t.js gzip 155 B N/A -
2k1q_gre6hp0-.js gzip 8.56 kB N/A -
2kvj8yrfznmwx.js gzip 5.69 kB N/A -
2rw6naw2b83yz.js gzip 155 B N/A -
2sgqisp4604si.js gzip 8.51 kB N/A -
2w6v6x0pu6b9t.js gzip 152 B N/A -
3-gysh_p9nr43.js gzip 154 B N/A -
32vddve-rleg-.js gzip 155 B N/A -
342ijzvrpe53h.js gzip 2.29 kB N/A -
3r9j-437x-6se.js gzip 70.8 kB N/A -
3u413wiqvqf_u.js gzip 49.1 kB N/A -
3v9s-fz24f8oo.js gzip 10.4 kB N/A -
3yexkdj8m6t6w.js gzip 156 B N/A -
420pn_b9x-3ir.js gzip 8.62 kB N/A -
44un3--wmqiyh.js gzip 7.61 kB N/A -
45b-gnabw9j10.js gzip 159 B N/A -
turbopack-03..-ma2.js gzip 4.19 kB N/A -
turbopack-13..kpmz.js gzip 4.19 kB N/A -
turbopack-1e..mq-a.js gzip 4.19 kB N/A -
turbopack-1m..v-xx.js gzip 4.19 kB N/A -
turbopack-1p..9plq.js gzip 4.19 kB N/A -
turbopack-2g..vuez.js gzip 4.19 kB N/A -
turbopack-2h..9hvz.js gzip 4.19 kB N/A -
turbopack-2z..x-oe.js gzip 4.19 kB N/A -
turbopack-2z.._2cn.js gzip 4.19 kB N/A -
turbopack-30..5pgu.js gzip 4.19 kB N/A -
turbopack-3c..zka7.js gzip 4.17 kB N/A -
turbopack-3q..w87f.js gzip 4.19 kB N/A -
turbopack-41..k4t0.js gzip 4.19 kB N/A -
turbopack-43..kpg1.js gzip 4.2 kB N/A -
089687r99-5_3.js gzip N/A 70.8 kB -
0arkbdqpxc37i.js gzip N/A 8.6 kB -
0ioow_tmvzxbf.js gzip N/A 160 B -
0tvekitj587fh.js gzip N/A 8.51 kB -
0z83a1om5rvtt.js gzip N/A 7.61 kB -
1-jqyfc89tixo.js gzip N/A 1.46 kB -
14t1kneseb8th.js gzip N/A 2.3 kB -
186o_9v4q6wvo.js gzip N/A 156 B -
192q2suy7rwb_.js gzip N/A 8.56 kB -
1ab2xruymo-oj.js gzip N/A 449 B -
1g64old_av12i.js gzip N/A 162 B -
1v0q1fw7v3roh.js gzip N/A 49.1 kB -
1wzrm0xjjbzn5.js gzip N/A 10.1 kB -
1xz2r9l20e-3a.js gzip N/A 154 B -
1z-ehckjr27om.js gzip N/A 156 B -
2368ic2ozqvf4.js gzip N/A 152 B -
25a1yz7zua29z.js gzip N/A 13.8 kB -
2f2bp_kexa37v.js gzip N/A 13.3 kB -
2i5v1taq97gql.js gzip N/A 8.59 kB -
2k_lzeilnqipg.js gzip N/A 158 B -
2k_ngfk54igk6.js gzip N/A 153 B -
2n3vh0w0tnb_2.js gzip N/A 8.52 kB -
2u_rpxq3tzytl.js gzip N/A 233 B -
2wfbykz1avdns.js gzip N/A 8.56 kB -
2xzzk6an46wqn.js gzip N/A 156 B -
32sifemopndov.js gzip N/A 10.4 kB -
368lim5wq0o0r.js gzip N/A 12.9 kB -
37eq851j9q6mo.js gzip N/A 154 B -
3de283pazbu99.js gzip N/A 9.81 kB -
3do8sy38i_qxd.js gzip N/A 158 B -
3drqjohogojbw.js gzip N/A 5.69 kB -
3dy48ip094dzs.js gzip N/A 65.5 kB -
3g8l1m2-o-ewi.js gzip N/A 13.1 kB -
3gp2o_v7jcw6s.js gzip N/A 8.57 kB -
3hqx7mbe-0y88.js gzip N/A 156 B -
3q6ng103a6hrv.js gzip N/A 167 B -
3qu7g1q2l_x2n.js gzip N/A 9.24 kB -
43j6fjudq0a3_.js gzip N/A 8.62 kB -
turbopack-02..3z3o.js gzip N/A 4.19 kB -
turbopack-06..dwwx.js gzip N/A 4.17 kB -
turbopack-0a..ouyp.js gzip N/A 4.19 kB -
turbopack-0g..wffw.js gzip N/A 4.19 kB -
turbopack-0j..oeej.js gzip N/A 4.19 kB -
turbopack-0l..0uik.js gzip N/A 4.2 kB -
turbopack-1g..agy-.js gzip N/A 4.19 kB -
turbopack-1n.._k1i.js gzip N/A 4.19 kB -
turbopack-1s..731r.js gzip N/A 4.19 kB -
turbopack-26..d_-r.js gzip N/A 4.19 kB -
turbopack-2u..rxmd.js gzip N/A 4.19 kB -
turbopack-3h..f3i2.js gzip N/A 4.19 kB -
turbopack-3m..ykcb.js gzip N/A 4.19 kB -
turbopack-44..-s4x.js gzip N/A 4.19 kB -
Total 465 kB 465 kB ⚠️ +55 B

Server

Middleware
Canary PR Change
middleware-b..fest.js gzip 716 B 721 B ✓
Total 716 B 721 B ⚠️ +5 B
Build Details
Build Manifests
Canary PR Change
_buildManifest.js gzip 435 B 434 B ✓
Total 435 B 434 B ✅ -1 B

📦 Webpack

Client

Main Bundles
Canary PR Change
2637-HASH.js gzip 4.63 kB N/A -
7724.HASH.js gzip 169 B N/A -
8274-HASH.js gzip 61.3 kB N/A -
8817-HASH.js gzip 5.59 kB N/A -
c3500254-HASH.js gzip 62.8 kB N/A -
framework-HASH.js gzip 59.7 kB 59.7 kB ✓
main-app-HASH.js gzip 254 B 255 B ✓
main-HASH.js gzip 39.4 kB 39.4 kB ✓
webpack-HASH.js gzip 1.68 kB 1.68 kB ✓
5887-HASH.js gzip N/A 5.61 kB -
6522-HASH.js gzip N/A 60.7 kB -
6779-HASH.js gzip N/A 4.63 kB -
8854.HASH.js gzip N/A 169 B -
eab920f9-HASH.js gzip N/A 62.8 kB -
Total 235 kB 235 kB ✅ -619 B
Polyfills
Canary PR Change
polyfills-HASH.js gzip 39.4 kB 39.4 kB ✓
Total 39.4 kB 39.4 kB ✓
Pages
Canary PR Change
_app-HASH.js gzip 193 B 193 B ✓
_error-HASH.js gzip 182 B 182 B ✓
css-HASH.js gzip 333 B 334 B ✓
dynamic-HASH.js gzip 1.81 kB 1.8 kB ✓
edge-ssr-HASH.js gzip 255 B 255 B ✓
head-HASH.js gzip 353 B 349 B 🟢 4 B (-1%)
hooks-HASH.js gzip 384 B 382 B ✓
image-HASH.js gzip 581 B 581 B ✓
index-HASH.js gzip 260 B 259 B ✓
link-HASH.js gzip 2.51 kB 2.51 kB ✓
routerDirect..HASH.js gzip 316 B 318 B ✓
script-HASH.js gzip 386 B 386 B ✓
withRouter-HASH.js gzip 313 B 314 B ✓
1afbb74e6ecf..834.css gzip 106 B 106 B ✓
Total 7.98 kB 7.97 kB ✅ -10 B

Server

Edge SSR
Canary PR Change
edge-ssr.js gzip 126 kB 126 kB ✓
page.js gzip 273 kB 272 kB ✓
Total 398 kB 398 kB ✅ -363 B
Middleware
Canary PR Change
middleware-b..fest.js gzip 618 B 618 B ✓
middleware-r..fest.js gzip 156 B 156 B ✓
middleware.js gzip 43.8 kB 44.3 kB 🔴 +544 B (+1%)
edge-runtime..pack.js gzip 842 B 842 B ✓
Total 45.4 kB 46 kB ⚠️ +544 B
Build Details
Build Manifests
Canary PR Change
_buildManifest.js gzip 721 B 720 B ✓
Total 721 B 720 B ✅ -1 B
Build Cache
Canary PR Change
0.pack gzip 4.37 MB 4.37 MB 🔴 +4.54 kB (+0%)
index.pack gzip 112 kB 113 kB 🔴 +1.32 kB (+1%)
index.pack.old gzip 115 kB 114 kB 🟢 1.34 kB (-1%)
Total 4.59 MB 4.6 MB ⚠️ +4.52 kB

🔄 Shared (bundler-independent)

Runtimes
Canary PR Change
app-page-exp...dev.js gzip 346 kB 346 kB ✓
app-page-exp..prod.js gzip 192 kB 192 kB ✓
app-page-tur...dev.js gzip 346 kB 346 kB ✓
app-page-tur..prod.js gzip 191 kB 191 kB ✓
app-page-tur...dev.js gzip 342 kB 342 kB ✓
app-page-tur..prod.js gzip 189 kB 189 kB ✓
app-page.run...dev.js gzip 343 kB 343 kB ✓
app-page.run..prod.js gzip 190 kB 190 kB ✓
app-route-ex...dev.js gzip 77 kB 77 kB ✓
app-route-ex..prod.js gzip 52.5 kB 52.5 kB ✓
app-route-tu...dev.js gzip 77.1 kB 77.1 kB ✓
app-route-tu..prod.js gzip 52.5 kB 52.5 kB ✓
app-route-tu...dev.js gzip 76.6 kB 76.6 kB ✓
app-route-tu..prod.js gzip 52.3 kB 52.3 kB ✓
app-route.ru...dev.js gzip 76.6 kB 76.6 kB ✓
app-route.ru..prod.js gzip 52.2 kB 52.2 kB ✓
dist_client_...dev.js gzip 324 B 324 B ✓
dist_client_...dev.js gzip 326 B 326 B ✓
dist_client_...dev.js gzip 318 B 318 B ✓
dist_client_...dev.js gzip 317 B 317 B ✓
pages-api-tu...dev.js gzip 43.9 kB 43.9 kB ✓
pages-api-tu..prod.js gzip 33.5 kB 33.5 kB ✓
pages-api.ru...dev.js gzip 43.9 kB 43.9 kB ✓
pages-api.ru..prod.js gzip 33.5 kB 33.5 kB ✓
pages-turbo....dev.js gzip 53.3 kB 53.3 kB ✓
pages-turbo...prod.js gzip 39.1 kB 39.1 kB ✓
pages.runtim...dev.js gzip 53.3 kB 53.3 kB ✓
pages.runtim..prod.js gzip 39.1 kB 39.1 kB ✓
server.runti..prod.js gzip 62.8 kB 62.8 kB ✓
Total 3.06 MB 3.06 MB ✅ -3 B
📎 Tarball URL 
https://vercel-packages.vercel.app/next/commits/8ff7671c670cea058cc2df26c03960c86afe7a15/next

@mmastrac mmastrac requested review from a team and bgw April 14, 2026 00:44
@mmastrac mmastrac merged commit 26b8758 into canary Apr 14, 2026
185 checks passed
@mmastrac mmastrac deleted the mmastrac/pin-artifact-actions branch April 14, 2026 01:22
@mmastrac mmastrac mentioned this pull request Apr 14, 2026
Open
@github-actions github-actions Bot locked as resolved and limited conversation to collaborators Apr 29, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Reviewers

@bgw bgw bgw approved these changes

Assignees

No one assigned

Labels

created-by: Turbopack team PRs by the Turbopack team. locked

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@mmastrac @nextjs-bot @bgw