build(deps): bump actions/upload-artifact from 4 to 7#98
build(deps): bump actions/upload-artifact from 4 to 7#98dependabot[bot] wants to merge 1 commit intomainfrom
Conversation
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
![cubic-dev-ai[bot]](https://avatars.githubusercontent.com/in/1082092?s=60&v=4){kind=small}
There was a problem hiding this comment.
1 issue found across 1 file
Prompt for AI agents (unresolved issues)
Check if these issues are valid — if so, understand the root cause of each and fix them. If appropriate, use sub-agents to investigate and fix each issue separately.
<file name=".github/workflows/deploy-frontend.yml">
<violation number="1" location=".github/workflows/deploy-frontend.yml:56">
P1: `upload-artifact` is bumped to v7 but `download-artifact` on line 69 remains at v4. These companion actions should be version-aligned — bump `download-artifact` to v7 as well to avoid artifact download failures in the deploy job.</violation>
</file>
Reply with feedback, questions, or to request a fix. Tag @cubic-dev-ai to re-run a review.
|
|
||
| - name: Upload build artifact | ||
| uses: actions/upload-artifact@v4 | ||
| uses: actions/upload-artifact@v7 |
There was a problem hiding this comment.
P1: upload-artifact is bumped to v7 but download-artifact on line 69 remains at v4. These companion actions should be version-aligned — bump download-artifact to v7 as well to avoid artifact download failures in the deploy job.
Prompt for AI agents
Check if this issue is valid — if so, understand the root cause and fix it. At .github/workflows/deploy-frontend.yml, line 56:
<comment>`upload-artifact` is bumped to v7 but `download-artifact` on line 69 remains at v4. These companion actions should be version-aligned — bump `download-artifact` to v7 as well to avoid artifact download failures in the deploy job.</comment>
<file context>
@@ -53,7 +53,7 @@ jobs:
- name: Upload build artifact
- uses: actions/upload-artifact@v4
+ uses: actions/upload-artifact@v7
with:
name: frontend-dist
</file context>
![devin-ai-integration[bot]](https://avatars.githubusercontent.com/in/811515?s=60&v=4){kind=small}
|
|
||
| - name: Upload build artifact | ||
| uses: actions/upload-artifact@v4 | ||
| uses: actions/upload-artifact@v7 |
There was a problem hiding this comment.
🔴 upload-artifact bumped to v7 but download-artifact left at v4, breaking artifact transfer between jobs
The build job uploads artifacts with actions/upload-artifact@v7 (line 56), but the deploy job still downloads with actions/download-artifact@v4 (line 69). The upload-artifact and download-artifact actions must use compatible major versions because major version bumps change the underlying artifact backend. This version mismatch will cause the deploy job to fail to retrieve the artifact uploaded by the build job, breaking the entire frontend deployment pipeline.
Prompt for agents
The upload-artifact action was bumped to v7 but the corresponding download-artifact action at line 69 was not updated. These two actions must use compatible major versions to function correctly. Either revert upload-artifact back to v4 to match the existing download-artifact@v4, or bump download-artifact to v7 as well (at .github/workflows/deploy-frontend.yml line 69: change `actions/download-artifact@v4` to `actions/download-artifact@v7`).
Was this helpful? React with 👍 or 👎 to provide feedback.
dependabot
Bot
changed the title
dependabot
Bot
force-pushed
the
dependabot/github_actions/actions/upload-artifact-7
branch
6 times, most recently
from
d3f9d02 to
447d768
Compare
dependabot
Bot
force-pushed
the
dependabot/github_actions/actions/upload-artifact-7
branch
2 times, most recently
from
4eee816 to
74e573e
Compare
![propel-code-bot[bot]](https://avatars.githubusercontent.com/in/1179004?s=60&v=4){kind=small}
dependabot
Bot
force-pushed
the
dependabot/github_actions/actions/upload-artifact-7
branch
3 times, most recently
from
08ea8c2 to
2f56438
Compare
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4 to 7. - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@v4...v7) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/github_actions/actions/upload-artifact-7
branch
from
2f56438 to
e0d5d36
Compare
Bumps actions/upload-artifact from 4 to 7.
Release notes
Sourced from actions/upload-artifact's releases.
... (truncated)
Commits
043fb46Merge pull request #797 from actions/yacaovsnc/update-dependency634250cInclude changes in typespec/ts-http-runtime 0.3.5e454baaReadme: bump all the example versions to v7 (#796)74fad66Update the readme with direct upload details (#795)bbbca2dSupport direct file uploads (#764)589182cUpgrade the module to ESM and bump dependencies (#762)47309c9Merge pull request #754 from actions/Link-/add-proxy-integration-tests02a8460Add proxy integration testb7c566aMerge pull request #745 from actions/upload-artifact-v6-releasee516bc8docs: correct description of Node.js 24 support in README