Skip to content

Bump @actions/artifact to 6.3.1 - #821

Merged
tunc-d merged 1 commit into
mainfrom
tunc-d-upload-artifact-package-bump
Oct 7, 2026
Merged

tunc-d merged 1 commit into
mainfrom
tunc-d-upload-artifact-package-bump

Conversation

@tunc-d

@tunc-d tunc-d commented Oct 6, 2026 •

Copy link
Copy Markdown
Contributor

Summary

  • Update @actions/artifact to ^6.3.1 and regenerate the npm lockfile.
  • Regenerate the upload and merge bundles with npm run release.
  • Refresh generated license metadata for updated dependencies; keep the action version unchanged.

Includes the HTTP 429 retry improvements from actions/toolkit#2534 and the production runtime dependency fix from actions/toolkit#2537.

Validation

  • Clean npm ci and npm run check-all: all 31 tests, TypeScript build, lint, and formatting pass.
  • Both bundles regenerate reproducibly and load without unresolved dependencies.
  • Licensed 2.12.2 status passes.

Regenerate upload and merge bundles and refresh dependency license metadata.

Co-authored-by: Copilot App <[email protected]>
@tunc-d
tunc-d requested a review from a team as a code owner October 6, 2026 12:57
Copilot AI balanced review requested due to automatic review settings October 6, 2026 12:57

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot review overview

🟢 Approval recommended

The dependency, generated bundles, lockfile, and license caches are consistent with the validated upstream releases.

Review effort: Balanced
Findings: None

What changed in this PR

Updates @actions/artifact to 6.3.1, incorporating improved retry handling and the corrected protobuf runtime dependency.

Changes:

  • Updates dependency and lockfile versions.
  • Regenerates upload and merge bundles.
  • Refreshes dependency license caches.
File Description
package.json Bumps @actions/artifact.
package-lock.json Updates the resolved dependency graph.
dist/​upload/​index.js Regenerates the upload bundle.
dist/​merge/​index.js Regenerates the merge bundle.
.licenses/​npm/​@actions/​artifact.dep.yml Refreshes artifact license metadata.
.licenses/​npm/​@actions/​core.dep.yml Refreshes core license metadata.
.licenses/​npm/​@actions/​github.dep.yml Refreshes GitHub license metadata.

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

@tunc-d
tunc-d merged commit 4687c1b into main Oct 7, 2026
13 checks passed
@tunc-d tunc-d mentioned this pull request Oct 7, 2026
renovate Bot added a commit to sdwilsh/sOS that referenced this pull request Oct 7, 2026
##### [\`v7.0.2\`](https://github.com/actions/upload-artifact/releases/tag/v7.0.2)

##### What's Changed

- Improves artifact download retries when the service returns HTTP 429 (rate limiting), including honoring valid Retry-After headers.
- Updates [@actions/artifact](https://github.com/actions/artifact) to v6.3.1.

##### New Contributors

- [@tunc-d](https://github.com/tunc-d) made their first contribution in [#821](actions/upload-artifact#821)

**Full Changelog**: <actions/upload-artifact@v7.0.1...v7.0.2>

---
##### [\`v7.0.1\`](https://github.com/actions/upload-artifact/releases/tag/v7.0.1)

##### What's Changed

- Update the readme with direct upload details by [@danwkennedy](https://github.com/danwkennedy) in [#795](actions/upload-artifact#795)
- Readme: bump all the example versions to v7 by [@danwkennedy](https://github.com/danwkennedy) in [#796](actions/upload-artifact#796)
- Include changes in typespec/ts-http-runtime 0.3.5 by [@yacaovsnc](https://github.com/yacaovsnc) in [#797](actions/upload-artifact#797)

**Full Changelog**: <actions/upload-artifact@v7...v7.0.1>

---
##### [\`v7.0.0\`](https://github.com/actions/upload-artifact/releases/tag/v7.0.0)

#### v7 What's new

##### Direct Uploads

Adds support for uploading single files directly (unzipped). Callers can set the new `archive` parameter to `false` to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The `name` parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.

##### ESM

To support new versions of the `@actions/*` packages, we've upgraded the package to ESM.

#### What's Changed

- Add proxy integration test by [@Link-](https://github.com/Link-) in [#754](actions/upload-artifact#754)
- Upgrade the module to ESM and bump dependencies by [@danwkennedy](https://github.com/danwkennedy) in [#762](actions/upload-artifact#762)
- Support direct file uploads by [@danwkennedy](https://github.com/danwkennedy) in [#764](actions/upload-artifact#764)

#### New Contributors

- [@Link-](https://github.com/Link-) made their first contribution in [#754](actions/upload-artifact#754)

**Full Changelog**: <actions/upload-artifact@v6...v7.0.0>

---
##### [\`v6.0.0\`](https://github.com/actions/upload-artifact/releases/tag/v6.0.0)

#### v6 - What's new

> \[!IMPORTANT]
> actions/upload-artifact\@v6 now runs on Node.js 24 (`runs.using: node24`) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.

##### Node.js 24

This release updates the runtime to Node.js 24. v5 had preliminary support for Node.js 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.

#### What's Changed

- Upload Artifact Node 24 support by [@salmanmkc](https://github.com/salmanmkc) in [#719](actions/upload-artifact#719)
- fix: update [@actions/artifact](https://github.com/actions/artifact) for Node.js 24 punycode deprecation by [@salmanmkc](https://github.com/salmanmkc) in [#744](actions/upload-artifact#744)
- prepare release v6.0.0 for Node.js 24 support by [@salmanmkc](https://github.com/salmanmkc) in [#745](actions/upload-artifact#745)

**Full Changelog**: <actions/upload-artifact@v5.0.0...v6.0.0>

---
##### [\`v5.0.0\`](https://github.com/actions/upload-artifact/releases/tag/v5.0.0)

#### What's Changed

**BREAKING CHANGE:** this update supports Node `v24.x`. This is not a breaking change per-se but we're treating it as such.

- Update README.md by [@GhadimiR](https://github.com/GhadimiR) in [#681](actions/upload-artifact#681)
- Update README.md by [@nebuk89](https://github.com/nebuk89) in [#712](actions/upload-artifact#712)
- Readme: spell out the first use of GHES by [@danwkennedy](https://github.com/danwkennedy) in [#727](actions/upload-artifact#727)
- Update GHES guidance to include reference to Node 20 version by [@patrikpolyak](https://github.com/patrikpolyak) in [#725](actions/upload-artifact#725)
- Bump `@actions/artifact` to `v4.0.0`
- Prepare `v5.0.0` by [@danwkennedy](https://github.com/danwkennedy) in [#734](actions/upload-artifact#734)

#### New Contributors

- [@GhadimiR](https://github.com/GhadimiR) made their first contribution in [#681](actions/upload-artifact#681)
- [@nebuk89](https://github.com/nebuk89) made their first contribution in [#712](actions/upload-artifact#712)
- [@danwkennedy](https://github.com/danwkennedy) made their first contribution in [#727](actions/upload-artifact#727)
- [@patrikpolyak](https://github.com/patrikpolyak) made their first contribution in [#725](actions/upload-artifact#725)

**Full Changelog**: <actions/upload-artifact@v4...v5.0.0>
onap-github pushed a commit to onap/ccsdk-apps that referenced this pull request Oct 13, 2026
Bumps actions/upload-artifact from 7.0.1 to 7.0.2.
## Release notes

Sourced from actions/upload-artifact's releases.

v7.0.2
What's Changed

Improves artifact download retries when the service returns HTTP 429 (rate limiting), including honoring valid Retry-After headers.
Updates @​actions/artifact to v6.3.1.

New Contributors

@​tunc-d made their first contribution in actions/upload-artifact#821

Full Changelog: actions/upload-artifact@v7.0.1...v7.0.2

## Commits

cf430e0 Merge pull request #822 from actions/tunc-d-prepare-upload-v7-0-2
c2acded chore: prepare v7.0.2 release
4687c1b Merge pull request #821 from actions/tunc-d-upload-artifact-package-bump
8cbe1be Bump @​actions/artifact to 6.3.1
See full diff in compare view

![Dependabot compatibility score](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Issue-ID: CIMAN-33
Signed-off-by: dependabot[bot] <[email protected]>
Change-Id: I62743aa0402fee368efea033dc1eabfe3779eabf
GitHub-PR: #50
GitHub-Hash: 7aa2f642f0037b8f
Signed-off-by: onap.gh2gerrit <[email protected]>
onap-github pushed a commit to onap/sdc-onap-ui-angular that referenced this pull request Oct 13, 2026
## Release notes

Sourced from actions/upload-artifact's releases.

v7.0.2
What's Changed

Improves artifact download retries when the service returns HTTP 429 (rate limiting), including honoring valid Retry-After headers.
Updates @​actions/artifact to v6.3.1.

New Contributors

@​tunc-d made their first contribution in actions/upload-artifact#821

Full Changelog: actions/upload-artifact@v7.0.1...v7.0.2

## Commits

cf430e0 Merge pull request #822 from actions/tunc-d-prepare-upload-v7-0-2
c2acded chore: prepare v7.0.2 release
4687c1b Merge pull request #821 from actions/tunc-d-upload-artifact-package-bump
8cbe1be Bump @​actions/artifact to 6.3.1
See full diff in compare view

![Dependabot compatibility score](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Issue-ID: CIMAN-33
Signed-off-by: dependabot[bot] <[email protected]>
Change-Id: I248337f15410d48dc5d50b7861696925a3eee508
GitHub-PR: #42
GitHub-Hash: f0cf6014636336f0
Signed-off-by: onap.gh2gerrit <[email protected]>
renovate Bot added a commit to sdwilsh/sOS that referenced this pull request Oct 13, 2026
##### [\`v7.0.2\`](https://github.com/actions/upload-artifact/releases/tag/v7.0.2)

#### What's Changed

- Improves artifact download retries when the service returns HTTP 429 (rate limiting), including honoring valid Retry-After headers.
- Updates [@actions/artifact](https://github.com/actions/artifact) to v6.3.1.

#### New Contributors

- [@tunc-d](https://github.com/tunc-d) made their first contribution in [#821](actions/upload-artifact#821)

**Full Changelog**: <actions/upload-artifact@v7.0.1...v7.0.2>

---
##### [\`v7.0.1\`](https://github.com/actions/upload-artifact/releases/tag/v7.0.1)

#### What's Changed

- Update the readme with direct upload details by [@danwkennedy](https://github.com/danwkennedy) in [#795](actions/upload-artifact#795)
- Readme: bump all the example versions to v7 by [@danwkennedy](https://github.com/danwkennedy) in [#796](actions/upload-artifact#796)
- Include changes in typespec/ts-http-runtime 0.3.5 by [@yacaovsnc](https://github.com/yacaovsnc) in [#797](actions/upload-artifact#797)

**Full Changelog**: <actions/upload-artifact@v7...v7.0.1>

---
##### [\`v7.0.0\`](https://github.com/actions/upload-artifact/releases/tag/v7.0.0)

#### v7 What's new

##### Direct Uploads

Adds support for uploading single files directly (unzipped). Callers can set the new `archive` parameter to `false` to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The `name` parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.

##### ESM

To support new versions of the `@actions/*` packages, we've upgraded the package to ESM.

#### What's Changed

- Add proxy integration test by [@Link-](https://github.com/Link-) in [#754](actions/upload-artifact#754)
- Upgrade the module to ESM and bump dependencies by [@danwkennedy](https://github.com/danwkennedy) in [#762](actions/upload-artifact#762)
- Support direct file uploads by [@danwkennedy](https://github.com/danwkennedy) in [#764](actions/upload-artifact#764)

#### New Contributors

- [@Link-](https://github.com/Link-) made their first contribution in [#754](actions/upload-artifact#754)

**Full Changelog**: <actions/upload-artifact@v6...v7.0.0>

---
##### [\`v6.0.0\`](https://github.com/actions/upload-artifact/releases/tag/v6.0.0)

##### v6 - What's new

> \[!IMPORTANT]
> actions/upload-artifact\@v6 now runs on Node.js 24 (`runs.using: node24`) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.

##### Node.js 24

This release updates the runtime to Node.js 24. v5 had preliminary support for Node.js 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.

##### What's Changed

- Upload Artifact Node 24 support by [@salmanmkc](https://github.com/salmanmkc) in [#719](actions/upload-artifact#719)
- fix: update [@actions/artifact](https://github.com/actions/artifact) for Node.js 24 punycode deprecation by [@salmanmkc](https://github.com/salmanmkc) in [#744](actions/upload-artifact#744)
- prepare release v6.0.0 for Node.js 24 support by [@salmanmkc](https://github.com/salmanmkc) in [#745](actions/upload-artifact#745)

**Full Changelog**: <actions/upload-artifact@v5.0.0...v6.0.0>

---
##### [\`v5.0.0\`](https://github.com/actions/upload-artifact/releases/tag/v5.0.0)

##### What's Changed

**BREAKING CHANGE:** this update supports Node `v24.x`. This is not a breaking change per-se but we're treating it as such.

- Update README.md by [@GhadimiR](https://github.com/GhadimiR) in [#681](actions/upload-artifact#681)
- Update README.md by [@nebuk89](https://github.com/nebuk89) in [#712](actions/upload-artifact#712)
- Readme: spell out the first use of GHES by [@danwkennedy](https://github.com/danwkennedy) in [#727](actions/upload-artifact#727)
- Update GHES guidance to include reference to Node 20 version by [@patrikpolyak](https://github.com/patrikpolyak) in [#725](actions/upload-artifact#725)
- Bump `@actions/artifact` to `v4.0.0`
- Prepare `v5.0.0` by [@danwkennedy](https://github.com/danwkennedy) in [#734](actions/upload-artifact#734)

##### New Contributors

- [@GhadimiR](https://github.com/GhadimiR) made their first contribution in [#681](actions/upload-artifact#681)
- [@nebuk89](https://github.com/nebuk89) made their first contribution in [#712](actions/upload-artifact#712)
- [@danwkennedy](https://github.com/danwkennedy) made their first contribution in [#727](actions/upload-artifact#727)
- [@patrikpolyak](https://github.com/patrikpolyak) made their first contribution in [#725](actions/upload-artifact#725)

**Full Changelog**: <actions/upload-artifact@v4...v5.0.0>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants