chore(deps): Bump actions/upload-artifact from 3 to 4 #5
Conversation
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 3 to 4. - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@v3...v4) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-version: '4' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
the
dependencies
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
There was a problem hiding this comment.
Pull Request Overview
This PR updates the GitHub Actions workflow to use the latest version of the actions/upload-artifact action, upgrading from version 3 to version 4.
- Updates two instances of
actions/upload-artifactfrom v3 to v4 - Maintains existing artifact upload functionality for SBOM and SpotBugs reports
Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.
| uses: actions/upload-artifact@v3 | ||
| uses: actions/upload-artifact@v4 | ||
| with: | ||
| name: bom.json |
There was a problem hiding this comment.
The upgrade to actions/upload-artifact@v4 introduces breaking changes. The name parameter behavior has changed - in v4, artifacts with the same name will merge their contents instead of overwriting. Consider using unique names or review if this merging behavior is intended for the 'bom.json' artifact.
| name: bom.json | |
| name: bom-${{ github.run_id }}.json |
| uses: actions/upload-artifact@v3 | ||
| uses: actions/upload-artifact@v4 | ||
| with: | ||
| name: spotbugs-site |
There was a problem hiding this comment.
The upgrade to actions/upload-artifact@v4 introduces breaking changes. The name parameter behavior has changed - in v4, artifacts with the same name will merge their contents instead of overwriting. Consider using unique names or review if this merging behavior is intended for the 'spotbugs-site' artifact.
| name: spotbugs-site | |
| name: spotbugs-site-${{ github.run_id }} |
Bumps actions/upload-artifact from 3 to 4.
Release notes
Sourced from actions/upload-artifact's releases.
... (truncated)
Commits
ea165f8Merge pull request #685 from salmanmkc/salmanmkc/3-new-upload-artifacts-release0839620Prepare for new release of actions/upload-artifact with new toolkit cache ver...4cec3d8Merge pull request #673 from actions/yacaovsnc/artifact_2.2.2e9fad96license cache update for artifactb26fd06Update to use artifact 2.2.2 package65c4c4aMerge pull request #662 from actions/yacaovsnc/add_variable_for_concurrency_a...0207619move files back to satisfy licensed ci1ecca81licensed cache updates9742269Expose env vars to controll concurrency and timeout6f51ac0Merge pull request #656 from bdehamer/bdehamer/artifact-digestDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)