From f44cbac019c0a223015f5eb2477218079e0dc5b2 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 11 Oct 2026 22:22:06 +0000
Subject: [PATCH] Bump actions/upload-artifact from 4.6.2 to 7.0.2

Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.6.2 to 7.0.2.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v4.6.2...cf430e030ddbb5b0abf93d22962f4752f3646cd9)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: 7.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/ci.yml                | 4 ++--
 .github/workflows/release-candidate.yml | 2 +-
 .github/workflows/release.yml           | 2 +-
 3 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index e9a55a93..a2cbae37 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -122,7 +122,7 @@ jobs:
           python scripts/rehearse_release.py --dist "$RUNNER_TEMP/rehearsal-dist" \
             --source-sha "$SOURCE_SHA" --work-dir "$RUNNER_TEMP/rehearsal"
       - name: Upload sanitized pre-merge evidence
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9
         with:
           name: release-rehearsal-evidence
           path: |
@@ -241,7 +241,7 @@ jobs:
           NODE_PATH="$RUNNER_TEMP/board-browser/node_modules" node tests/board_qualification_browser.cjs "$RUNNER_TEMP/board-qualification"
       - name: Upload allowlisted qualification metadata
         if: always()
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9
         with:
           name: board-qualification
           path: |
diff --git a/.github/workflows/release-candidate.yml b/.github/workflows/release-candidate.yml
index ef43b6a4..dc217948 100644
--- a/.github/workflows/release-candidate.yml
+++ b/.github/workflows/release-candidate.yml
@@ -68,7 +68,7 @@ jobs:
           cp "$RUNNER_TEMP/rehearsal/rehearsal.json" "$RUNNER_TEMP/candidate/rehearsal.json"
 
       - name: Retain candidate and sanitized evidence
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9
         with:
           name: code-mower-candidate
           path: ${{ runner.temp }}/candidate/*
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 12c897dc..e74372cd 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -132,7 +132,7 @@ jobs:
           cp candidate/*.whl candidate/*.tar.gz dist/
 
       - name: Upload distributions
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9
         with:
           name: code-mower-dist
           path: dist/*