Skip to content

Bump actions/upload-artifact from 6 to 7#812

Merged
abrookins merged 2 commits intomainfrom
dependabot/github_actions/actions/upload-artifact-7
Mar 13, 2026
Merged

Bump actions/upload-artifact from 6 to 7#812
abrookins merged 2 commits intomainfrom
dependabot/github_actions/actions/upload-artifact-7

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 2, 2026

Bumps actions/upload-artifact from 6 to 7.

Release notes

Sourced from actions/upload-artifact's releases.

v7.0.0

v7 What's new

Direct Uploads

Adds support for uploading single files directly (unzipped). Callers can set the new archive parameter to false to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The name parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.

ESM

To support new versions of the @actions/* packages, we've upgraded the package to ESM.

What's Changed

New Contributors

Full Changelog: actions/upload-artifact@v6...v7.0.0

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note

Low Risk
Low risk: this only updates the GitHub Actions upload-artifact version used to publish benchmark JSON, with no product/runtime code changes.

Overview
Updates the CI benchmarks workflow to use actions/upload-artifact@v7 instead of @v6 when uploading benchmark-results.json as an artifact.

Written by Cursor Bugbot for commit 271ec0d. This will update automatically on new commits. Configure here.

Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 6 to 7.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@v6...v7)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@jit-ci
Copy link

jit-ci bot commented Mar 2, 2026

🛡️ Jit Security Scan Results

CRITICAL HIGH MEDIUM

✅ No security findings were detected in this PR


Security scan by Jit

Copy link

@github-actions github-actions bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Performance Alert ⚠️

Possible performance regression was detected for benchmark.
Benchmark result of this commit is worse than the previous benchmark result exceeding threshold 1.20.

Benchmark suite Current: 271ec0d Previous: 5cc2a0a Ratio
tests/test_benchmarks.py::TestSaveBenchmarks::test_hashmodel_save 1371.5522776056232 iter/sec (stddev: 0.000042688299645249126) 1699.5276281873903 iter/sec (stddev: 0.000047273503656264995) 1.24
tests/test_benchmarks.py::TestSaveBenchmarks::test_jsonmodel_save 1980.7924928989319 iter/sec (stddev: 0.00007340768170886122) 2695.9341592398578 iter/sec (stddev: 0.00003651846926792038) 1.36
tests/test_benchmarks.py::TestSaveBenchmarks::test_jsonmodel_with_embedded_save 1670.9062850317107 iter/sec (stddev: 0.00014690999864094535) 2068.3347179411417 iter/sec (stddev: 0.0001717480230308605) 1.24
tests/test_benchmarks.py::TestGetBenchmarks::test_hashmodel_get 3007.5465659172105 iter/sec (stddev: 0.00001439090457869559) 4064.2411844450407 iter/sec (stddev: 0.000013458427244701447) 1.35
tests/test_benchmarks.py::TestQueryBenchmarks::test_hashmodel_find_by_field 2299.427387391214 iter/sec (stddev: 0.00004513857641510443) 2841.7370697570304 iter/sec (stddev: 0.000030215168234826113) 1.24
tests/test_benchmarks.py::TestQueryBenchmarks::test_jsonmodel_find_by_field 1557.3766202637082 iter/sec (stddev: 0.000035585497077555724) 2001.4057073155302 iter/sec (stddev: 0.00003533482101265644) 1.29
tests/test_benchmarks.py::TestQueryBenchmarks::test_jsonmodel_find_with_pagination 1016.9020096591494 iter/sec (stddev: 0.00004267044187793216) 1229.966278507361 iter/sec (stddev: 0.00003393660690877957) 1.21
tests/test_benchmarks.py::TestUpdateBenchmarks::test_hashmodel_update 1508.436436108457 iter/sec (stddev: 0.000042945995201555344) 1895.3189923313062 iter/sec (stddev: 0.000027454978105497385) 1.26
tests/test_benchmarks.py::TestUpdateBenchmarks::test_jsonmodel_update_embedded 1984.9103147894343 iter/sec (stddev: 0.00009270487806485746) 2455.134805196193 iter/sec (stddev: 0.00008420559813407964) 1.24
tests/test_benchmarks.py::TestBatchBenchmarks::test_jsonmodel_add_many 561.3054689922401 iter/sec (stddev: 0.00025526393870262305) 698.0020152995705 iter/sec (stddev: 0.00010061602456646967) 1.24

This comment was automatically generated by workflow using github-action-benchmark.

@abrookins abrookins merged commit 643a11a into main Mar 13, 2026
17 checks passed
@abrookins abrookins deleted the dependabot/github_actions/actions/upload-artifact-7 branch March 13, 2026 17:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant