From c0cf817e684adfd88b59c73bb5bd2ce95707d729 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 12 Aug 2026 14:36:49 +0000 Subject: [PATCH] Bump actions/upload-artifact from 6.0.0 to 7.0.1 Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 6.0.0 to 7.0.1. - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/b7c566a772e6b6bfb58ed0dc250532a479d7789f...043fb46d1a93c77aae656e7c1c64a875d1fc6a0a) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/release.yml | 2 +- .github/workflows/security.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index db0a54a..a6656ab 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -101,7 +101,7 @@ jobs: - run: python -m twine check dist/* - id: package-version run: echo "version=$(python -c 'import tomllib; print(tomllib.load(open("pyproject.toml", "rb"))["project"]["version"])')" >> "$GITHUB_OUTPUT" - - uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6 + - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 with: name: python-package-distributions path: dist/ diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml index 46d1591..2ec09ba 100644 --- a/.github/workflows/security.yml +++ b/.github/workflows/security.yml @@ -64,7 +64,7 @@ jobs: --of JSON \ -o artifacts/mendmark.cdx.json python -c 'import json; d=json.load(open("artifacts/mendmark.cdx.json")); assert d["bomFormat"] == "CycloneDX"; assert d["metadata"]["component"]["name"] == "mendmark-evals"' - - uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6 + - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 with: name: mendmark-cyclonedx-sbom-${{ github.sha }} path: artifacts/mendmark.cdx.json