Bump actions/upload-artifact from 5 to 6 #162

dependabot · 2025-12-15T09:06:05Z

Bumps actions/upload-artifact from 5 to 6.

Release notes

Sourced from actions/upload-artifact's releases.

v6.0.0

v6 - What's new

[!IMPORTANT] actions/upload-artifact@v6 now runs on Node.js 24 (runs.using: node24) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.

Node.js 24

This release updates the runtime to Node.js 24. v5 had preliminary support for Node.js 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.

What's Changed

Upload Artifact Node 24 support by @salmanmkc in actions/upload-artifact#719

fix: update @actions/artifact for Node.js 24 punycode deprecation by @salmanmkc in actions/upload-artifact#744

prepare release v6.0.0 for Node.js 24 support by @salmanmkc in actions/upload-artifact#745

Full Changelog: actions/upload-artifact@v5.0.0...v6.0.0

Commits

b7c566a Merge pull request #745 from actions/upload-artifact-v6-release
e516bc8 docs: correct description of Node.js 24 support in README
ddc45ed docs: update README to correct action name for Node.js 24 support
615b319 chore: release v6.0.0 for Node.js 24 support
017748b Merge pull request #744 from actions/fix-storage-blob
38d4c79 chore: rebuild dist
7d27270 chore: add missing license cache files for @actions/core, @actions/io, and mi...
5f643d3 chore: update license files for @actions/artifact@5.0.1 dependencies
1df1684 chore: update package-lock.json with @actions/artifact@5.0.1
b5b1a91 fix: update @actions/artifact to ^5.0.0 for Node.js 24 punycode fix
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Resolves #745
Resolves #744
Resolves actions/upload-artifact#719
Resolves actions/upload-artifact#744
Resolves actions/upload-artifact#745

Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 5 to 6. - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@v5...v6) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2025-12-15T09:11:04Z

🤖 Claude Code Review

Code Review Analysis

Code Quality

✅ Code follows style guide

Status: PASS - This PR only modifies GitHub Actions workflow files. The changes are straightforward version bumps that follow YAML best practices.

✅ No commented-out code

Status: PASS - No commented-out code present in the diff.

✅ Meaningful variable names

Status: PASS - All names are standard GitHub Actions conventions (not applicable to this PR as no new variables are introduced).

✅ DRY principle followed

Status: PASS - The same change pattern is applied consistently across all three workflow files.

✅ Identify Defects

Status: PASS - No bugs, logic errors, or defects identified. The upgrade from actions/upload-artifact@v5 to @v6 is a standard dependency update. This is a breaking change in the action (v6 changes artifact handling), but the usage in these workflows appears compatible with v6's API.

Note: The actions/upload-artifact@v6 introduces changes to artifact behavior:

All artifacts now use a single artifact per workflow run namespace
Multiple uploads with the same name will overwrite each other
In these workflows, artifact names are unique (cover.out and test-log), so this should work correctly.

✅ Project memory configuration

Status: N/A - No project-specific Claude configuration issues applicable to this change.

Testing

⚠️ Unit tests for new functions

Status: N/A - No new functions added. This is an infrastructure change.

⚠️ Integration tests for new endpoints

Status: N/A - No new endpoints added.

⚠️ Edge cases covered

Status: N/A - Not applicable for GitHub Actions version updates.

⚠️ Test coverage > 80%

Status: N/A - This change doesn't affect code coverage. The workflows themselves test the Go code and will continue to do so.

Documentation

✅ Readme updated if needed

Status: PASS - No README update needed for a GitHub Actions dependency update.

✅ API docs updated

Status: PASS - N/A for this change.

✅ Inline comments for complex logic

Status: PASS - The workflow files are self-documenting; no complex logic requiring comments.

❌ CHANGELOG.md updated

Status: FAIL - The CHANGELOG.md should be updated to document this infrastructure change.

Action Required: Add an entry to CHANGELOG.md noting the upgrade from actions/upload-artifact@v5 to @v6 across all workflow files.

✅ Markdown files follow CommonMark

Status: PASS - No markdown files modified in this PR.

Security

✅ No hardcoded credentials

Status: PASS - No credentials present.

✅ Input validation implemented

Status: PASS - N/A for this change.

✅ Proper error handling

Status: PASS - The workflows maintain their existing error handling (if: always() conditions are preserved).

✅ No sensitive data in logs

Status: PASS - No changes to logging behavior.

✅ No license files or AQAAAD strings

Status: PASS - No license files or suspicious strings in the diff.

Summary

Overall Assessment: ✅ APPROVED with minor documentation improvement needed

This is a clean, straightforward dependency update that upgrades the actions/upload-artifact action from v5 to v6 across three workflow files (Darwin, Linux, Windows). The changes are consistent and correct.

Required Action:

Update CHANGELOG.md to document this infrastructure change

Recommendation:
Verify that the workflows run successfully after this change, as `actions/upload-artifact@v6` has breaking changes in artifact handling behavior (though your usage appears compatible).

Automated code review analyzing defects and coding standards

dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Dec 15, 2025

dependabot bot requested a review from a team as a code owner December 15, 2025 09:06

dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Dec 15, 2025

docktermj self-assigned this Dec 15, 2025

docktermj approved these changes Dec 15, 2025

View reviewed changes

docktermj merged commit fbf19c9 into main Dec 15, 2025
39 of 42 checks passed

docktermj deleted the dependabot/github_actions/actions/upload-artifact-6 branch December 15, 2025 14:17

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump actions/upload-artifact from 5 to 6 #162

Bump actions/upload-artifact from 5 to 6 #162

Uh oh!

dependabot bot commented on behalf of github Dec 15, 2025 •

edited by github-actions bot

Loading

Uh oh!

github-actions bot commented Dec 15, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Bump actions/upload-artifact from 5 to 6 #162

Bump actions/upload-artifact from 5 to 6 #162

Uh oh!

Conversation

dependabot bot commented on behalf of github Dec 15, 2025 • edited by github-actions bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v6.0.0

v6 - What's new

Node.js 24

What's Changed

Uh oh!

github-actions bot commented Dec 15, 2025

🤖 Claude Code Review

Code Review Analysis

Code Quality

✅ Code follows style guide

✅ No commented-out code

✅ Meaningful variable names

✅ DRY principle followed

✅ Identify Defects

✅ Project memory configuration

Testing

⚠️ Unit tests for new functions

⚠️ Integration tests for new endpoints

⚠️ Edge cases covered

⚠️ Test coverage > 80%

Documentation

✅ Readme updated if needed

✅ API docs updated

✅ Inline comments for complex logic

❌ CHANGELOG.md updated

✅ Markdown files follow CommonMark

Security

✅ No hardcoded credentials

✅ Input validation implemented

✅ Proper error handling

✅ No sensitive data in logs

✅ No license files or AQAAAD strings

Summary

Recommendation: Verify that the workflows run successfully after this change, as actions/upload-artifact@v6 has breaking changes in artifact handling behavior (though your usage appears compatible).

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

dependabot bot commented on behalf of github Dec 15, 2025 •

edited by github-actions bot

Loading

Recommendation:
Verify that the workflows run successfully after this change, as `actions/upload-artifact@v6` has breaking changes in artifact handling behavior (though your usage appears compatible).