From 040b9afc68de063f67ebf090d5a726744d9a41dd Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 14 Oct 2026 18:24:58 +0000 Subject: [PATCH 1/2] chore(deps): bump actions/upload-artifact from 7.0.1 to 7.0.2 Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 7.0.1 to 7.0.2. - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/043fb46d1a93c77aae656e7c1c64a875d1fc6a0a...cf430e030ddbb5b0abf93d22962f4752f3646cd9) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-version: 7.0.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- .github/workflows/monthly_publish.yml | 4 ++-- .github/workflows/publish-lifecycle-inputs.yml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/monthly_publish.yml b/.github/workflows/monthly_publish.yml index 275fc82..19b920a 100644 --- a/.github/workflows/monthly_publish.yml +++ b/.github/workflows/monthly_publish.yml @@ -105,7 +105,7 @@ jobs: run: cat data/output/monthly_report_bundle/job_summary.md >> "$GITHUB_STEP_SUMMARY" - name: Upload Monthly Report Artifact - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7 with: name: ${{ steps.monthly-report.outputs.artifact_name }} path: data/output/monthly_report_bundle @@ -301,7 +301,7 @@ jobs: - name: Archive review verdict even when escalation is unavailable if: always() - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7 with: name: monthly-review-verdict-${{ github.run_id }}-${{ github.run_attempt }} path: data/output/monthly_review_verdict.json diff --git a/.github/workflows/publish-lifecycle-inputs.yml b/.github/workflows/publish-lifecycle-inputs.yml index ac63267..49d3bc3 100644 --- a/.github/workflows/publish-lifecycle-inputs.yml +++ b/.github/workflows/publish-lifecycle-inputs.yml @@ -53,7 +53,7 @@ jobs: --output-dir "${RUNNER_TEMP}/crypto-lifecycle-inputs" - name: Upload lifecycle inputs - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7 with: name: crypto-lifecycle-inputs-${{ github.run_id }}-${{ github.run_attempt }} path: ${{ runner.temp }}/crypto-lifecycle-inputs From 52ce7b7974d6dfea5afe785247995d22cc3361ff Mon Sep 17 00:00:00 2001 From: Pigbibi <20649888+Pigbibi@users.noreply.github.com> Date: Fri, 16 Oct 2026 02:04:48 +0800 Subject: [PATCH 2/2] test: match artifact action patch pins Co-Authored-By: Codex --- tests/test_monthly_publish_workflow_config.py | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/tests/test_monthly_publish_workflow_config.py b/tests/test_monthly_publish_workflow_config.py index 86f6813..040d224 100644 --- a/tests/test_monthly_publish_workflow_config.py +++ b/tests/test_monthly_publish_workflow_config.py @@ -18,20 +18,20 @@ PINNED_ACTIONS = ( "actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6", "actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6", - "actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7", + "actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7", ) EXPECTED_REMOTE_ACTIONS = { WORKFLOW_PATH: { "actions/checkout": ("d23441a48e516b6c34aea4fa41551a30e30af803", "v6"), "actions/setup-python": ("ece7cb06caefa5fff74198d8649806c4678c61a1", "v6"), - "actions/upload-artifact": ("043fb46d1a93c77aae656e7c1c64a875d1fc6a0a", "v7"), + "actions/upload-artifact": ("cf430e030ddbb5b0abf93d22962f4752f3646cd9", "v7"), "actions/download-artifact": ("9000827ccba6bdab643e8b6fd33ac0654aef8333", "v8"), "google-github-actions/auth": ("7c6bc770dae815cd3e89ee6cdf493a5fab2cc093", "v3"), }, LIFECYCLE_WORKFLOW_PATH: { "actions/checkout": ("d23441a48e516b6c34aea4fa41551a30e30af803", "v6"), "actions/setup-python": ("ece7cb06caefa5fff74198d8649806c4678c61a1", "v6"), - "actions/upload-artifact": ("043fb46d1a93c77aae656e7c1c64a875d1fc6a0a", "v7"), + "actions/upload-artifact": ("cf430e030ddbb5b0abf93d22962f4752f3646cd9", "v7"), }, }