From be5e8fbd379481275d0b7c3823a57a537dac13ec Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 4 Mar 2026 18:32:35 -0700 Subject: [PATCH] chore(deps): bump actions/upload-artifact from 6 to 7 (#13207) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 6 to 7.
Release notes

Sourced from actions/upload-artifact's releases.

v7.0.0

v7 What's new

Direct Uploads

Adds support for uploading single files directly (unzipped). Callers can set the new archive parameter to false to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The name parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.

ESM

To support new versions of the @actions/* packages, we've upgraded the package to ESM.

What's Changed

New Contributors

Full Changelog: https://github.com/actions/upload-artifact/compare/v6...v7.0.0

Commits

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/upload-artifact&package-manager=github_actions&previous-version=6&new-version=7)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Eric Traut --- .github/workflows/ci.yml | 2 +- .github/workflows/rust-ci.yml | 4 ++-- .github/workflows/rust-release-windows.yml | 6 +++--- .github/workflows/rust-release.yml | 4 ++-- .github/workflows/shell-tool-mcp.yml | 10 +++++----- 5 files changed, 13 insertions(+), 13 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index fd2e5131a..0588d01a7 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -47,7 +47,7 @@ jobs: echo "pack_output=$PACK_OUTPUT" >> "$GITHUB_OUTPUT" - name: Upload staged npm package artifact - uses: actions/upload-artifact@v6 + uses: actions/upload-artifact@v7 with: name: codex-npm-staging path: ${{ steps.stage_npm_package.outputs.pack_output }} diff --git a/.github/workflows/rust-ci.yml b/.github/workflows/rust-ci.yml index 3122a965a..46de51bc6 100644 --- a/.github/workflows/rust-ci.yml +++ b/.github/workflows/rust-ci.yml @@ -392,7 +392,7 @@ jobs: - name: Upload Cargo timings (clippy) if: always() - uses: actions/upload-artifact@v6 + uses: actions/upload-artifact@v7 with: name: cargo-timings-rust-ci-clippy-${{ matrix.target }}-${{ matrix.profile }} path: codex-rs/target/**/cargo-timings/cargo-timing.html @@ -605,7 +605,7 @@ jobs: - name: Upload Cargo timings (nextest) if: always() - uses: actions/upload-artifact@v6 + uses: actions/upload-artifact@v7 with: name: cargo-timings-rust-ci-nextest-${{ matrix.target }}-${{ matrix.profile }} path: codex-rs/target/**/cargo-timings/cargo-timing.html diff --git a/.github/workflows/rust-release-windows.yml b/.github/workflows/rust-release-windows.yml index 652763eec..f762fbc4b 100644 --- a/.github/workflows/rust-release-windows.yml +++ b/.github/workflows/rust-release-windows.yml @@ -92,7 +92,7 @@ jobs: cargo build --target ${{ matrix.target }} --release --timings ${{ matrix.build_args }} - name: Upload Cargo timings - uses: actions/upload-artifact@v6 + uses: actions/upload-artifact@v7 with: name: cargo-timings-rust-release-windows-${{ matrix.target }}-${{ matrix.bundle }} path: codex-rs/target/**/cargo-timings/cargo-timing.html @@ -112,7 +112,7 @@ jobs: fi - name: Upload Windows binaries - uses: actions/upload-artifact@v6 + uses: actions/upload-artifact@v7 with: name: windows-binaries-${{ matrix.target }}-${{ matrix.bundle }} path: | @@ -257,7 +257,7 @@ jobs: "${GITHUB_WORKSPACE}/.github/workflows/zstd" -T0 -19 "$dest/$base" done - - uses: actions/upload-artifact@v6 + - uses: actions/upload-artifact@v7 with: name: ${{ matrix.target }} path: | diff --git a/.github/workflows/rust-release.yml b/.github/workflows/rust-release.yml index e44bd6be4..48d6b90bf 100644 --- a/.github/workflows/rust-release.yml +++ b/.github/workflows/rust-release.yml @@ -217,7 +217,7 @@ jobs: cargo build --target ${{ matrix.target }} --release --timings --bin codex --bin codex-responses-api-proxy - name: Upload Cargo timings - uses: actions/upload-artifact@v6 + uses: actions/upload-artifact@v7 with: name: cargo-timings-rust-release-${{ matrix.target }} path: codex-rs/target/**/cargo-timings/cargo-timing.html @@ -356,7 +356,7 @@ jobs: zstd -T0 -19 --rm "$dest/$base" done - - uses: actions/upload-artifact@v6 + - uses: actions/upload-artifact@v7 with: name: ${{ matrix.target }} # Upload the per-binary .zst files as well as the new .tar.gz diff --git a/.github/workflows/shell-tool-mcp.yml b/.github/workflows/shell-tool-mcp.yml index fc708bf00..38b5d9d8b 100644 --- a/.github/workflows/shell-tool-mcp.yml +++ b/.github/workflows/shell-tool-mcp.yml @@ -158,7 +158,7 @@ jobs: mkdir -p "$dest" cp bash "$dest/bash" - - uses: actions/upload-artifact@v6 + - uses: actions/upload-artifact@v7 with: name: shell-tool-mcp-bash-${{ matrix.target }}-${{ matrix.variant }} path: artifacts/** @@ -199,7 +199,7 @@ jobs: mkdir -p "$dest" cp bash "$dest/bash" - - uses: actions/upload-artifact@v6 + - uses: actions/upload-artifact@v7 with: name: shell-tool-mcp-bash-${{ matrix.target }}-${{ matrix.variant }} path: artifacts/** @@ -325,7 +325,7 @@ jobs: grep -Fx "smoke-zsh" "$tmpdir/stdout.txt" grep -Fx "/bin/echo" "$tmpdir/wrapper.log" - - uses: actions/upload-artifact@v6 + - uses: actions/upload-artifact@v7 with: name: shell-tool-mcp-zsh-${{ matrix.target }}-${{ matrix.variant }} path: artifacts/** @@ -403,7 +403,7 @@ jobs: grep -Fx "smoke-zsh" "$tmpdir/stdout.txt" grep -Fx "/bin/echo" "$tmpdir/wrapper.log" - - uses: actions/upload-artifact@v6 + - uses: actions/upload-artifact@v7 with: name: shell-tool-mcp-zsh-${{ matrix.target }}-${{ matrix.variant }} path: artifacts/** @@ -500,7 +500,7 @@ jobs: filename=$(PACK_INFO="$pack_info" node -e 'const data = JSON.parse(process.env.PACK_INFO); console.log(data[0].filename);') mv "dist/npm/${filename}" "dist/npm/codex-shell-tool-mcp-npm-${PACKAGE_VERSION}.tgz" - - uses: actions/upload-artifact@v6 + - uses: actions/upload-artifact@v7 with: name: codex-shell-tool-mcp-npm path: dist/npm/codex-shell-tool-mcp-npm-${{ env.PACKAGE_VERSION }}.tgz