build(deps): bump actions/upload-artifact from 6.0.0 to 7.0.1
What the developer wrote
Authored by dependabot[bot]
build(deps): bump actions/upload-artifact from 6.0.0 to 7.0.1
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 6.0.0 to 7.0.1.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/b7c566a772e6b6bfb58ed0dc250532a479d7789f...043fb46d1a93c77aae656e7c1c64a875d1fc6a0a)
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-version: 7.0.1
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
What changed, and why it matters
This is a routine automated update by Dependabot that bumps the version of a GitHub Actions helper used to save build artifacts in three CI workflow files. There is no indication of a security issue in the project code itself, and the change does not alter how the project handles Bitcoin data, keys, or network messages.
No action required. Review the upstream actions/upload-artifact v7.0.1 release notes as part of normal dependency hygiene if desired.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The commit updates the pinned SHA for actions/upload-artifact from v6.0.0 to v7.0.1 in .github/workflows/cron-daily-fuzz.yml, .github/workflows/cron-weekly-cargo-mutants.yml, and .github/workflows/semver-checks.yml. It is a standard dependency bump with no functional changes to the rust-bitcoin library or its build logic beyond the CI artifact upload step.
Changed components
GitHub Actions CI workflowsactions/upload-artifact dependencyInspect captured patch +3 / −3
diff --git a/.github/workflows/cron-daily-fuzz.yml b/.github/workflows/cron-daily-fuzz.yml
index daa126f0..1a641ef4 100644
--- a/.github/workflows/cron-daily-fuzz.yml
+++ b/.github/workflows/cron-daily-fuzz.yml
@@ -152,7 +152,7 @@ jobs:
echo "Using RUSTFLAGS $RUSTFLAGS"
cd fuzz && ./fuzz.sh "${{ matrix.fuzz_target }}"
- run: echo "${{ matrix.fuzz_target }}" >executed_${{ matrix.fuzz_target }}
- - uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
+ - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
with:
name: executed_${{ matrix.fuzz_target }}
path: executed_${{ matrix.fuzz_target }}
diff --git a/.github/workflows/cron-weekly-cargo-mutants.yml b/.github/workflows/cron-weekly-cargo-mutants.yml
index 1bf15cd7..56017df7 100644
--- a/.github/workflows/cron-weekly-cargo-mutants.yml
+++ b/.github/workflows/cron-weekly-cargo-mutants.yml
@@ -18,7 +18,7 @@ jobs:
with:
tool: cargo-mutants
- run: cargo mutants --in-place --no-shuffle
- - uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
+ - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
if: always()
with:
name: mutants.out
diff --git a/.github/workflows/semver-checks.yml b/.github/workflows/semver-checks.yml
index 2f854fb9..b3a7636b 100644
--- a/.github/workflows/semver-checks.yml
+++ b/.github/workflows/semver-checks.yml
@@ -43,7 +43,7 @@ jobs:
echo "$PR_NUMBER" > ./semver-break
- name: "Save breaking state"
if: ${{ hashFiles('semver-break') != '' }}
- uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
+ uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
with:
name: semver-break
path: semver-break
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.