From 082696adf3b5260cc81b515cc7b40da23be5a6a1 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 23 Oct 2026 01:51:32 +0000 Subject: [PATCH] build(deps): bump actions/upload-artifact from 7.0.1 to 7.0.2 Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 7.0.1 to 7.0.2. - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/043fb46d1a93c77aae656e7c1c64a875d1fc6a0a...cf430e030ddbb5b0abf93d22962f4752f3646cd9) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-version: 7.0.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- .github/workflows/application-native-regressions.yml | 6 +++--- .github/workflows/application.yml | 12 ++++++------ .github/workflows/ci.yml | 4 ++-- .../conversation-performance-diagnostics.yml | 2 +- .github/workflows/linux-sandbox-service.yml | 6 +++--- .github/workflows/release.yml | 6 +++--- 6 files changed, 18 insertions(+), 18 deletions(-) diff --git a/.github/workflows/application-native-regressions.yml b/.github/workflows/application-native-regressions.yml index 9e68ec19..5cac57e7 100644 --- a/.github/workflows/application-native-regressions.yml +++ b/.github/workflows/application-native-regressions.yml @@ -88,7 +88,7 @@ jobs: tests/shell-layout.spec.ts \ tests/subject-objectives-restore.spec.ts \ tests/e2e/reader-pagination.spec.ts - - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a + - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 if: always() with: name: remaining-browser-regressions @@ -120,7 +120,7 @@ jobs: run: node scripts/reader-ocr-model-fixture.mjs "$RUNNER_TEMP/reader-ocr-models" --download - run: npm run test:reader-ocr -- "$RUNNER_TEMP/reader-ocr-models" - run: npm run test:reader-stability -- "$RUNNER_TEMP/reader-ocr-models" - - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a + - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 if: always() with: name: isolated-reader-regressions @@ -191,7 +191,7 @@ jobs: tests/message-work-footer.spec.ts \ tests/exchange-resize.spec.ts \ tests/exchange-floating-controls.spec.ts --trace on - - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a + - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 if: always() with: name: isolated-linux-native-failures diff --git a/.github/workflows/application.yml b/.github/workflows/application.yml index e5b9262a..97fcd96e 100644 --- a/.github/workflows/application.yml +++ b/.github/workflows/application.yml @@ -98,7 +98,7 @@ jobs: resource_observer=$! trap 'kill "$resource_observer" 2>/dev/null || true; wait "$resource_observer" 2>/dev/null || true' EXIT xvfb-run -a npm test - - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 if: failure() || cancelled() with: name: application-node-failures @@ -148,7 +148,7 @@ jobs: # Shards are complete complementary partitions, not selected files or # retries. Keep one worker inside each isolated runner for native focus. - run: xvfb-run -a --server-args="-screen 0 1920x1200x24" npm run test:e2e -- --shard=${{ matrix.shard }}/2 --forbid-only - - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 if: failure() || cancelled() with: name: application-web-failures-${{ matrix.shard }} @@ -298,7 +298,7 @@ jobs: run: npm run test:reader-ocr -- "$RUNNER_TEMP/reader-ocr-models" - name: Reader repeated navigation and OCR resource cleanup run: npm run test:reader-stability -- "$RUNNER_TEMP/reader-ocr-models" - - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 if: always() with: name: reader-desktop-regression @@ -310,7 +310,7 @@ jobs: application/test-results/morphz-embedded-electron-*/reader-ocr-*.png if-no-files-found: ignore retention-days: 7 - - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 if: failure() with: name: application-desktop-failures @@ -362,7 +362,7 @@ jobs: # Only the gate's bounded, redacted text/summary; never fixture databases, # private bindings, provider request bodies or the user's profile. # Cancellation attempts finalization; runner loss may leave only running. - - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 if: ${{ always() }} with: name: cognitive-runtime-contract-evidence @@ -435,7 +435,7 @@ jobs: npm --prefix application run test:script-recovery # IPC publishes only synthetic, sanitized causal/terminal diagnostics. # Runner loss may prevent this upload; missing evidence is not success. - - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 if: ${{ always() && (failure() || cancelled()) }} with: name: runtime-contract-failure-evidence diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 081c13a7..f7b19c75 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -243,7 +243,7 @@ jobs: file "$destination/morphz" (cd "$destination" && shasum -a 256 morphz > morphz.sha256) - name: Preserve the native-tested macOS development Runtime - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: morphz-macos-development-runtime-${{ runner.arch }} path: ${{ runner.temp }}/morphz-macos-development-runtime/ @@ -426,7 +426,7 @@ jobs: Compress-Archive -Path "$mainBundle/*" -DestinationPath "target/morphz-windows-x86_64.zip" -Force Compress-Archive -Path "$edgeBundle/*" -DestinationPath "target/morphz-edge-windows-x86_64.zip" -Force - name: Upload verified Windows bundles - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: morphz-windows-x86_64 path: | diff --git a/.github/workflows/conversation-performance-diagnostics.yml b/.github/workflows/conversation-performance-diagnostics.yml index 6f3f37bd..0699ef31 100644 --- a/.github/workflows/conversation-performance-diagnostics.yml +++ b/.github/workflows/conversation-performance-diagnostics.yml @@ -50,7 +50,7 @@ jobs: npx playwright test tests/conversation-performance.spec.ts --workers=1 --retries=0 --reporter=list,json - name: Preserve measurements even when the original budget fails if: always() - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: conversation-profile-additional-projects-${{ matrix.projects }} path: | diff --git a/.github/workflows/linux-sandbox-service.yml b/.github/workflows/linux-sandbox-service.yml index 0f51709f..bf0a0c74 100644 --- a/.github/workflows/linux-sandbox-service.yml +++ b/.github/workflows/linux-sandbox-service.yml @@ -83,7 +83,7 @@ jobs: run: /usr/local/libexec/morphz-runtime-ci/native --nocapture --test-threads=1 2>&1 | tee "$RUNNER_TEMP/native-admission.log" - name: Preserve early admission failures before the full inventory if: always() - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 with: name: native-admission-${{ github.run_id }} path: ${{ runner.temp }}/native-admission.log @@ -106,7 +106,7 @@ jobs: mkdir -p "$RUNNER_TEMP/installed-sandbox-evidence" sudo journalctl -u morphz-sandbox.service --no-pager > "$RUNNER_TEMP/installed-sandbox-evidence/service.log" sudo dmesg | tail -300 > "$RUNNER_TEMP/installed-sandbox-evidence/kernel.log" || true - - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a + - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 if: always() with: name: installed-runtime-sandbox-${{ github.run_id }} @@ -168,7 +168,7 @@ jobs: done - name: Preserve failed and successful kernel evidence if: always() - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 with: name: linux-sandbox-compiler-kernel-${{ github.run_id }} path: ${{ runner.temp }}/linux-sandbox-evidence/*.tar.gz diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 26f164c5..640ccc16 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -206,7 +206,7 @@ jobs: edge_asset="morphz-edge-${edge_asset#morphz-}.tar.gz" tar -tzf "dist/$edge_asset" | grep -Fx morphz-edge tar -tzf "dist/$edge_asset" | grep -Fx THIRD_PARTY_LICENSES_RUST.md - - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: ${{ matrix.asset }} path: | @@ -353,7 +353,7 @@ jobs: else file "dist/morphz-bundle/morphz" | grep -F '${{ matrix.file_arch }}' fi - - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: ${{ matrix.asset }} path: | @@ -482,7 +482,7 @@ jobs: throw "packaged Windows Edge runtime is missing $_" } } - - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: morphz-windows-x86_64 path: |