build(deps): bump actions/upload-artifact from 4 to 5
What the developer wrote
Authored by dependabot[bot]
build(deps): bump actions/upload-artifact from 4 to 5
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4 to 5.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v4...v5)
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-version: '5'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
What changed, and why it matters
This is a routine dependency update by Dependabot that bumps the GitHub Actions 'upload-artifact' action from version 4 to version 5 in three internal workflow files. There is no code change to the rust-bitcoin library itself, and nothing in the commit suggests a security problem or fix.
No security action required. Treat as routine CI maintenance; verify the upstream v5 release notes for any breaking changes before merging if not already done.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The commit modifies only .github/workflows/cron-daily-fuzz.yml, .github/workflows/cron-weekly-cargo-mutants.yml, and .github/workflows/semver-checks.yml, changing ‘uses: actions/upload-artifact@v4’ to ‘uses: actions/upload-artifact@v5’. These workflows upload fuzzing results, mutation-testing output, and semver-check artifacts. The change is a standard major-version bump of a GitHub-maintained action with no accompanying security discussion or functional code changes.
Changed components
.github/workflows/cron-daily-fuzz.yml.github/workflows/cron-weekly-cargo-mutants.yml.github/workflows/semver-checks.ymlInspect captured patch +3 / −3
diff --git a/.github/workflows/cron-daily-fuzz.yml b/.github/workflows/cron-daily-fuzz.yml
index 63f67eca..f6c8c1da 100644
--- a/.github/workflows/cron-daily-fuzz.yml
+++ b/.github/workflows/cron-daily-fuzz.yml
@@ -67,7 +67,7 @@ jobs:
echo "Using RUSTFLAGS $RUSTFLAGS"
cd fuzz && ./fuzz.sh "${{ matrix.fuzz_target }}"
- run: echo "${{ matrix.fuzz_target }}" >executed_${{ matrix.fuzz_target }}
- - uses: actions/upload-artifact@v4
+ - uses: actions/upload-artifact@v5
with:
name: executed_${{ matrix.fuzz_target }}
path: executed_${{ matrix.fuzz_target }}
diff --git a/.github/workflows/cron-weekly-cargo-mutants.yml b/.github/workflows/cron-weekly-cargo-mutants.yml
index fd352b1a..2a57d037 100644
--- a/.github/workflows/cron-weekly-cargo-mutants.yml
+++ b/.github/workflows/cron-weekly-cargo-mutants.yml
@@ -12,7 +12,7 @@ jobs:
with:
tool: cargo-mutants
- run: cargo mutants --in-place --no-shuffle
- - uses: actions/upload-artifact@v4
+ - uses: actions/upload-artifact@v5
if: always()
with:
name: mutants.out
diff --git a/.github/workflows/semver-checks.yml b/.github/workflows/semver-checks.yml
index 4b0e3ca9..66d5cb1e 100644
--- a/.github/workflows/semver-checks.yml
+++ b/.github/workflows/semver-checks.yml
@@ -38,7 +38,7 @@ jobs:
echo "$PR_NUMBER" > ./semver-break
- name: "Save breaking state"
if: ${{ hashFiles('semver-break') != '' }}
- uses: actions/upload-artifact@v4
+ uses: actions/upload-artifact@v5
with:
name: semver-break
path: semver-break
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.