chore(deps): bump actions/upload-artifact from 4.6.2 to 7.0.1 in the all-dependencies group

.github/workflows/ci.yml

@@ -651,7 +651,7 @@ jobs:
         cat DEPLOYMENT_SUMMARY.md
 
     - name: Upload deployment artifact
-      uses: actions/upload-artifact@v7
+      uses: actions/upload-artifact@v7.0.1
       with:
         name: deployment-summary
         path: DEPLOYMENT_SUMMARY.md

.github/workflows/co-located-smoke.yml

@@ -233,7 +233,7 @@ jobs:
 
       - name: Upload failure logs
         if: failure()
-        uses: actions/upload-artifact@v7
+        uses: actions/upload-artifact@v7.0.1
         with:
           name: colocated-smoke-logs
           path: colocated-failure-logs.txt

.github/workflows/coverage.yml

@@ -136,7 +136,7 @@ jobs:
       # covered the lines it executed, and this suite has standing failures.
       - name: Upload shard coverage data
         if: ${{ !cancelled() }}
-        uses: actions/upload-artifact@v7
+        uses: actions/upload-artifact@v7.0.1
         with:
           name: coverage-shard-${{ matrix.shard }}
           path: .coverage.shard-${{ matrix.shard }}

.github/workflows/docker-smoke-test.yml

@@ -214,7 +214,7 @@ jobs:
 
       - name: Upload failure logs
         if: failure()
-        uses: actions/upload-artifact@v7
+        uses: actions/upload-artifact@v7.0.1
         with:
           name: docker-compose-logs
           path: failure-logs.txt

.github/workflows/frontend-test.yml

@@ -231,7 +231,7 @@ jobs:
           fail_ci_if_error: false
 
       - name: Upload test results
-        uses: actions/upload-artifact@v7
+        uses: actions/upload-artifact@v7.0.1
         if: always()
         with:
           name: test-results-unit
@@ -338,7 +338,7 @@ jobs:
           npx auditjs ossi || true
 
       - name: Upload security scan results
-        uses: actions/upload-artifact@v7
+        uses: actions/upload-artifact@v7.0.1
         if: always()
         with:
           name: security-scan-results

.github/workflows/hardened-smoke-test.yml

@@ -340,7 +340,7 @@ jobs:
 
       - name: Upload failure logs
         if: failure()
-        uses: actions/upload-artifact@v7
+        uses: actions/upload-artifact@v7.0.1
         with:
           name: hardened-docker-compose-logs
           path: failure-logs.txt

.github/workflows/import-hermeticity-sweep.yml

@@ -187,7 +187,7 @@ jobs:
 
       - name: Keep the raw output
         if: always() && steps.mode.outputs.mode != 'none'
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02  # v4.6.2
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a  # v7.0.1
         with:
           name: import-hermeticity-sweep
           path: sweep-output.txt

.github/workflows/marker-tests.yml

@@ -405,7 +405,7 @@ jobs:
 
       - name: Upload marker reports
         if: ${{ !cancelled() }}
-        uses: actions/upload-artifact@v7
+        uses: actions/upload-artifact@v7.0.1
         with:
           name: marker-suite-reports
           path: marker-report-*.xml

.github/workflows/phase_validation.yml

@@ -182,7 +182,7 @@ jobs:
         fi
 
     - name: Upload Validation Reports
-      uses: actions/upload-artifact@v7
+      uses: actions/upload-artifact@v7.0.1
       if: always()
       with:
         name: phase-validation-reports

.github/workflows/security.yml

@@ -334,7 +334,7 @@ jobs:
         done < <(git ls-files -z '*package-lock.json' | grep -zv node_modules)
 
     - name: Upload Security Reports
-      uses: actions/upload-artifact@v7
+      uses: actions/upload-artifact@v7.0.1
       if: always()
       with:
         name: dependency-security-reports
@@ -458,7 +458,7 @@ jobs:
     # directories, so the repository root was never read.
 
     - name: Upload SAST Reports
-      uses: actions/upload-artifact@v7
+      uses: actions/upload-artifact@v7.0.1
       if: always()
       with:
         name: sast-security-reports
@@ -684,7 +684,7 @@ jobs:
         } >> security-summary.md
 
     - name: Upload Security Summary
-      uses: actions/upload-artifact@v7
+      uses: actions/upload-artifact@v7.0.1
       with:
         name: security-summary
         path: security-summary.md

.github/workflows/test-durations.yml

@@ -129,7 +129,7 @@ jobs:
 
       - name: Upload durations
         if: ${{ !cancelled() }}
-        uses: actions/upload-artifact@v7
+        uses: actions/upload-artifact@v7.0.1
         with:
           name: test-durations
           # Both paths are dotfiles; upload-artifact excludes hidden files

.github/workflows/trajectory-eval.yml

@@ -97,7 +97,7 @@ jobs:
 
       - name: Upload eval report
         if: always()
-        uses: actions/upload-artifact@v7
+        uses: actions/upload-artifact@v7.0.1
         with:
           name: trajectory-eval-report
           path: |

.github/workflows/unwired-tracker-audit.yml

@@ -71,7 +71,7 @@ jobs:
 
       - name: Upload findings artifact
         if: always()
-        uses: actions/upload-artifact@v7
+        uses: actions/upload-artifact@v7.0.1
         with:
           name: unwired-tracker-findings
           path: findings.json

.github/workflows/visual-regression.yml

@@ -177,7 +177,7 @@ jobs:
         # upload the regenerated PNGs. Download this artifact, copy the
         # contents into tests/visual/__screenshots__/, and commit.
         if: steps.visual.outputs.first_run == 'regenerated'
-        uses: actions/upload-artifact@v7
+        uses: actions/upload-artifact@v7.0.1
         with:
           name: visual-regression-updated-baselines-${{ github.run_id }}
           path: autobot-frontend/tests/visual/__screenshots__/
@@ -191,7 +191,7 @@ jobs:
         # "Pull this branch + commit the generated baselines" is
         # unactionable since the screenshots never escape the CI runner.
         if: steps.visual.outputs.first_run == 'true'
-        uses: actions/upload-artifact@v7
+        uses: actions/upload-artifact@v7.0.1
         with:
           name: visual-regression-generated-baselines-${{ github.run_id }}
           path: autobot-frontend/tests/visual/__screenshots__/
@@ -203,7 +203,7 @@ jobs:
         # upload them so a maintainer can download and commit to enable
         # future diff enforcement for those stories.
         if: steps.visual.outputs.first_run == 'false' && success()
-        uses: actions/upload-artifact@v7
+        uses: actions/upload-artifact@v7.0.1
         with:
           name: visual-regression-new-baselines-${{ github.run_id }}
           path: autobot-frontend/tests/visual/__screenshots__/
@@ -212,7 +212,7 @@ jobs:
 
       - name: Upload Playwright HTML report on failure
         if: failure() || steps.visual.outcome == 'failure'
-        uses: actions/upload-artifact@v7
+        uses: actions/upload-artifact@v7.0.1
         with:
           name: visual-regression-report-${{ github.run_id }}
           path: autobot-frontend/playwright-report/
@@ -221,7 +221,7 @@ jobs:
 
       - name: Upload diff screenshots on failure
         if: failure() || steps.visual.outcome == 'failure'
-        uses: actions/upload-artifact@v7
+        uses: actions/upload-artifact@v7.0.1
         with:
           name: visual-regression-diffs-${{ github.run_id }}
           path: autobot-frontend/test-results/