chore: Update outdated GitHub Actions versions
What changed, and why it matters
This commit simply bumps three GitHub Actions dependencies to newer major versions in the project's automated CI workflow file. There is no code change to Bitcoin Core itself, no bug fix, and no security patch. It is a routine maintenance update to keep CI tooling current.
No security action required. Treat as routine CI maintenance; verify the updated action versions behave correctly in CI runs.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The diff updates .github/workflows/ci.yml: actions/cache v4→v5, actions/upload-artifact v4→v6, and actions/download-artifact v5→v7. These are third-party GitHub-provided actions used for caching and artifact transfer during continuous integration. No application logic, build scripts, consensus code, cryptography, or network handling is modified.
Changed components
.github/workflows/ci.ymlInspect captured patch +3 / −3
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index daeefddc..f54e0661 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -258,7 +258,7 @@ jobs:
sed -i '1s/^/set(ENV{CMAKE_POLICY_VERSION_MINIMUM} 3.5)\n/' "${VCPKG_INSTALLATION_ROOT}/scripts/ports.cmake"
- name: vcpkg tools cache
- uses: actions/cache@v4
+ uses: actions/cache@v5
with:
path: C:/vcpkg/downloads/tools
key: ${{ github.job }}-vcpkg-tools
@@ -409,7 +409,7 @@ jobs:
uses: ./.github/actions/save-caches
- name: Upload built executables
- uses: actions/upload-artifact@v4
+ uses: actions/upload-artifact@v6
with:
name: ${{ matrix.artifact-name }}-${{ github.run_id }}
path: |
@@ -447,7 +447,7 @@ jobs:
ref: ${{ needs.record-frozen-commit.outputs.commit }}
- name: Download built executables
- uses: actions/download-artifact@v5
+ uses: actions/download-artifact@v7
with:
name: ${{ matrix.artifact-name }}-${{ github.run_id }}
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.