Skip to content

Update GHES host check#1648

Merged
eggyhead merged 2 commits into
mainfrom
eggyhead/ghescheck-updatehosts
Jan 31, 2024
Merged

Update GHES host check#1648
eggyhead merged 2 commits into
mainfrom
eggyhead/ghescheck-updatehosts

Conversation

@eggyhead

@eggyhead eggyhead commented Jan 31, 2024 •
edited
Loading

Copy link
Copy Markdown
Contributor

What are we doing?

Currently, we are only checking equality against github.com to ensure artifact and cache actions are being run in a non-enterprise host. We need to update this check to allow requests from ghe.com and ghe.localhost, additional allowed hostnames for production and local development.

Fixes https://github.com/github/actions-results-team/issues/2208

How are we doing it?

  • We are including the known GItHub hostnames in the negative condition for isGhes

How do I test?

  • Run upload or download artifact from an allowed host using this toolkit package version

github-advanced-security[bot]
github-advanced-security AI found potential problems Jan 31, 2024
View reviewed changes
Comment thread packages/cache/src/internal/cacheUtils.ts Fixed

const hostname = ghUrl.hostname.trimEnd().toUpperCase()
const isGitHubHost = (hostname == 'GITHUB.COM')
const isProximaHost = (hostname.endsWith('GHE.COM') || hostname.endsWith('GHE.LOCALHOST'))

Check failure

Code scanning / CodeQL

Incomplete URL substring sanitization

'[GHE.COM](1)' may be preceded by an arbitrary host name.
@eggyhead
updating alowed hosts in isGhes check
3b02a6f 
updating alowed hosts in artifact ghes check

using dot prepend ghe host
@eggyhead eggyhead force-pushed the eggyhead/ghescheck-updatehosts branch from 1e316cc to 3b02a6f Compare January 31, 2024 16:31
@eggyhead eggyhead marked this pull request as ready for review January 31, 2024 17:14
@eggyhead eggyhead requested review from a team as code owners January 31, 2024 17:14
@eggyhead eggyhead changed the title Eggyhead/ghescheck updatehosts Update GHES host check Jan 31, 2024
@eggyhead eggyhead merged commit f1d9b4b into main Jan 31, 2024
This was referenced Jan 31, 2024
Merged
Merged
Merged
Merged
@bethanyj28 bethanyj28 mentioned this pull request Feb 29, 2024
Merged
10 tasks
chrisimap32
chrisimap32 suggested changes Apr 2, 2024
View reviewed changes

@chrisimap32 chrisimap32 left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

R

@chrisimap32

chrisimap32 commented Apr 3, 2024

Copy link
Copy Markdown

renovate Bot added a commit to sdwilsh/sOS that referenced this pull request Apr 29, 2026
@renovate
chore(deps): update actions/upload-artifact action to v7
e212d43 
##### [\`v7.0.1\`](https://github.com/actions/upload-artifact/releases/tag/v7.0.1)

##### What's Changed

- Update the readme with direct upload details by [@danwkennedy](https://github.com/danwkennedy) in [#795](actions/upload-artifact#795)
- Readme: bump all the example versions to v7 by [@danwkennedy](https://github.com/danwkennedy) in [#796](actions/upload-artifact#796)
- Include changes in typespec/ts-http-runtime 0.3.5 by [@yacaovsnc](https://github.com/yacaovsnc) in [#797](actions/upload-artifact#797)

**Full Changelog**: <actions/upload-artifact@v7...v7.0.1>

---
##### [\`v7.0.0\`](https://github.com/actions/upload-artifact/releases/tag/v7.0.0)

#### v7 What's new

##### Direct Uploads

Adds support for uploading single files directly (unzipped). Callers can set the new `archive` parameter to `false` to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The `name` parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.

##### ESM

To support new versions of the `@actions/*` packages, we've upgraded the package to ESM.

#### What's Changed

- Add proxy integration test by [@Link-](https://github.com/Link-) in [#754](actions/upload-artifact#754)
- Upgrade the module to ESM and bump dependencies by [@danwkennedy](https://github.com/danwkennedy) in [#762](actions/upload-artifact#762)
- Support direct file uploads by [@danwkennedy](https://github.com/danwkennedy) in [#764](actions/upload-artifact#764)

#### New Contributors

- [@Link-](https://github.com/Link-) made their first contribution in [#754](actions/upload-artifact#754)

**Full Changelog**: <actions/upload-artifact@v6...v7.0.0>

---
##### [\`v7\`](actions/upload-artifact@v6...v7)


---
##### [\`v6\`](actions/upload-artifact@v5...v6)


---
##### [\`v6.0.0\`](actions/upload-artifact@v5.0.0...v6.0.0)


---
##### [\`v5\`](actions/upload-artifact@v4...v5)


---
##### [\`v5.0.0\`](actions/upload-artifact@v4.6.2...v5.0.0)


---
##### [\`v4.6.2\`](https://github.com/actions/upload-artifact/releases/tag/v4.6.2)

#### What's Changed

- Update to use artifact 2.3.2 package & prepare for new upload-artifact release by [@salmanmkc](https://github.com/salmanmkc) in [#685](actions/upload-artifact#685)

#### New Contributors

- [@salmanmkc](https://github.com/salmanmkc) made their first contribution in [#685](actions/upload-artifact#685)

**Full Changelog**: <actions/upload-artifact@v4...v4.6.2>

---
##### [\`v4.6.1\`](https://github.com/actions/upload-artifact/releases/tag/v4.6.1)

#### What's Changed

- Update to use artifact 2.2.2 package by [@yacaovsnc](https://github.com/yacaovsnc) in [#673](actions/upload-artifact#673)

**Full Changelog**: <actions/upload-artifact@v4...v4.6.1>

---
##### [\`v4.6.0\`](https://github.com/actions/upload-artifact/releases/tag/v4.6.0)

#### What's Changed

- Expose env vars to control concurrency and timeout by [@yacaovsnc](https://github.com/yacaovsnc) in [#662](actions/upload-artifact#662)

**Full Changelog**: <actions/upload-artifact@v4...v4.6.0>

---
##### [\`v4.5.0\`](https://github.com/actions/upload-artifact/releases/tag/v4.5.0)

#### What's Changed

- fix: deprecated `Node.js` version in action by [@hamirmahal](https://github.com/hamirmahal) in [#578](actions/upload-artifact#578)
- Add new `artifact-digest` output by [@bdehamer](https://github.com/bdehamer) in [#656](actions/upload-artifact#656)

#### New Contributors

- [@hamirmahal](https://github.com/hamirmahal) made their first contribution in [#578](actions/upload-artifact#578)
- [@bdehamer](https://github.com/bdehamer) made their first contribution in [#656](actions/upload-artifact#656)

**Full Changelog**: <actions/upload-artifact@v4.4.3...v4.5.0>

---
##### [\`v4.4.3\`](https://github.com/actions/upload-artifact/releases/tag/v4.4.3)

#### What's Changed

- Undo indirect dependency updates from [#627](actions/upload-artifact#627) by [@joshmgross](https://github.com/joshmgross) in [#632](actions/upload-artifact#632)

**Full Changelog**: <actions/upload-artifact@v4.4.2...v4.4.3>

---
##### [\`v4.4.2\`](https://github.com/actions/upload-artifact/releases/tag/v4.4.2)

#### What's Changed

- Bump `@actions/artifact` to 2.1.11 by [@robherley](https://github.com/robherley) in [#627](actions/upload-artifact#627)
  - Includes fix for relative symlinks not resolving properly

**Full Changelog**: <actions/upload-artifact@v4.4.1...v4.4.2>

---
##### [\`v4.4.1\`](https://github.com/actions/upload-artifact/releases/tag/v4.4.1)

#### What's Changed

- Add a section about hidden files by [@joshmgross](https://github.com/joshmgross) in [#607](actions/upload-artifact#607)
- Add workflow file for publishing releases to immutable action package by [@Jcambass](https://github.com/Jcambass) in [#621](actions/upload-artifact#621)
- Update [@actions/artifact](https://github.com/actions/artifact) to latest version, includes symlink and timeout fixes by [@robherley](https://github.com/robherley) in [#625](actions/upload-artifact#625)

#### New Contributors

- [@Jcambass](https://github.com/Jcambass) made their first contribution in [#621](actions/upload-artifact#621)

**Full Changelog**: <actions/upload-artifact@v4.4.0...v4.4.1>

---
##### [\`v4.4.0\`](https://github.com/actions/upload-artifact/releases/tag/v4.4.0)

#### Notice: Breaking Changes ⚠️

We will no longer include hidden files and folders by default in the `upload-artifact` action of this version. This reduces the risk that credentials are accidentally uploaded into artifacts. Customers who need to continue to upload these files can use a new option, `include-hidden-files`, to continue to do so.

See ["Notice of upcoming deprecations and breaking changes in GitHub Actions runners"](https://github.blog/changelog/2024-08-19-notice-of-upcoming-deprecations-and-breaking-changes-in-github-actions-runners/) changelog and [this issue](actions/upload-artifact#602) for more details.

#### What's Changed

- Exclude hidden files by default by [@joshmgross](https://github.com/joshmgross) in [#598](actions/upload-artifact#598)

**Full Changelog**: <actions/upload-artifact@v4.3.6...v4.4.0>

---
##### [\`v4.3.6\`](https://github.com/actions/upload-artifact/releases/tag/v4.3.6)

#### What's Changed

- Revert to [@actions/artifact](https://github.com/actions/artifact) 2.1.8 by [@robherley](https://github.com/robherley) in [#594](actions/upload-artifact#594)

**Full Changelog**: <actions/upload-artifact@v4...v4.3.6>

---
##### [\`v4.3.5\`](https://github.com/actions/upload-artifact/releases/tag/v4.3.5)

#### What's Changed

- Bump [@actions/artifact](https://github.com/actions/artifact) to v2.1.9 by [@robherley](https://github.com/robherley) in [#588](actions/upload-artifact#588)
  - Fixed artifact upload chunk timeout logic [#1774](actions/toolkit#1774)
  - Use lazy stream to prevent issues with open file limits [#1771](actions/toolkit#1771)

**Full Changelog**: <actions/upload-artifact@v4.3.4...v4.3.5>

---
##### [\`v4.3.4\`](https://github.com/actions/upload-artifact/releases/tag/v4.3.4)

#### What's Changed

- Update [@actions/artifact](https://github.com/actions/artifact) version, bump dependencies by [@robherley](https://github.com/robherley) in [#584](actions/upload-artifact#584)

**Full Changelog**: <actions/upload-artifact@v4.3.3...v4.3.4>

---
##### [\`v4.3.3\`](https://github.com/actions/upload-artifact/releases/tag/v4.3.3)

#### What's Changed

- updating `@actions/artifact` dependency to v2.1.6 by [@eggyhead](https://github.com/eggyhead) in [#565](actions/upload-artifact#565)

**Full Changelog**: <actions/upload-artifact@v4.3.2...v4.3.3>

---
##### [\`v4.3.2\`](https://github.com/actions/upload-artifact/releases/tag/v4.3.2)

#### What's Changed

- Update release-new-action-version.yml by [@konradpabjan](https://github.com/konradpabjan) in [#516](actions/upload-artifact#516)
- Minor fix to the migration readme by [@andrewakim](https://github.com/andrewakim) in [#523](actions/upload-artifact#523)
- Update readme with v3/v2/v1 deprecation notice by [@robherley](https://github.com/robherley) in [#561](actions/upload-artifact#561)
- updating `@actions/artifact` dependency to v2.1.5 and `@actions/core` to v1.0.1 by [@eggyhead](https://github.com/eggyhead) in [#562](actions/upload-artifact#562)

#### New Contributors

- [@andrewakim](https://github.com/andrewakim) made their first contribution in [#523](actions/upload-artifact#523)

**Full Changelog**: <actions/upload-artifact@v4.3.1...v4.3.2>

---
##### [\`v4.3.1\`](https://github.com/actions/upload-artifact/releases/tag/v4.3.1)

- Bump [@actions/artifacts](https://github.com/actions/artifacts) to latest version to include [updated GHES host check](actions/toolkit#1648)

---
##### [\`v4.3.0\`](https://github.com/actions/upload-artifact/releases/tag/v4.3.0)

#### What's Changed

- Reorganize upload code in prep for merge logic & add more tests by [@robherley](https://github.com/robherley) in [#504](actions/upload-artifact#504)
- Add sub-action to merge artifacts by [@robherley](https://github.com/robherley) in [#505](actions/upload-artifact#505)

**Full Changelog**: <actions/upload-artifact@v4...v4.3.0>

---
##### [\`v4.2.0\`](https://github.com/actions/upload-artifact/releases/tag/v4.2.0)

#### What's Changed

- Ability to overwrite an Artifact by [@robherley](https://github.com/robherley) in [#501](actions/upload-artifact#501)

**Full Changelog**: <actions/upload-artifact@v4...v4.2.0>

---
##### [\`v4.1.0\`](https://github.com/actions/upload-artifact/releases/tag/v4.1.0)

#### What's Changed

- Add migrations docs by [@robherley](https://github.com/robherley) in [#482](actions/upload-artifact#482)
- Update README.md by [@samuelwine](https://github.com/samuelwine) in [#492](actions/upload-artifact#492)
- Support artifact-url output by [@konradpabjan](https://github.com/konradpabjan) in [#496](actions/upload-artifact#496)
- Update readme to reflect new 500 artifact per job limit by [@robherley](https://github.com/robherley) in [#497](actions/upload-artifact#497)

#### New Contributors

- [@samuelwine](https://github.com/samuelwine) made their first contribution in [#492](actions/upload-artifact#492)

**Full Changelog**: <actions/upload-artifact@v4...v4.1.0>
renovate Bot added a commit to sdwilsh/sOS that referenced this pull request May 12, 2026
@renovate
chore(deps): update actions/upload-artifact action to v7
972535d 
##### [\`v7.0.1\`](https://github.com/actions/upload-artifact/releases/tag/v7.0.1)

##### What's Changed

- Update the readme with direct upload details by [@danwkennedy](https://github.com/danwkennedy) in [#795](actions/upload-artifact#795)
- Readme: bump all the example versions to v7 by [@danwkennedy](https://github.com/danwkennedy) in [#796](actions/upload-artifact#796)
- Include changes in typespec/ts-http-runtime 0.3.5 by [@yacaovsnc](https://github.com/yacaovsnc) in [#797](actions/upload-artifact#797)

**Full Changelog**: <actions/upload-artifact@v7...v7.0.1>

---
##### [\`v7.0.0\`](https://github.com/actions/upload-artifact/releases/tag/v7.0.0)

#### v7 What's new

##### Direct Uploads

Adds support for uploading single files directly (unzipped). Callers can set the new `archive` parameter to `false` to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The `name` parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.

##### ESM

To support new versions of the `@actions/*` packages, we've upgraded the package to ESM.

#### What's Changed

- Add proxy integration test by [@Link-](https://github.com/Link-) in [#754](actions/upload-artifact#754)
- Upgrade the module to ESM and bump dependencies by [@danwkennedy](https://github.com/danwkennedy) in [#762](actions/upload-artifact#762)
- Support direct file uploads by [@danwkennedy](https://github.com/danwkennedy) in [#764](actions/upload-artifact#764)

#### New Contributors

- [@Link-](https://github.com/Link-) made their first contribution in [#754](actions/upload-artifact#754)

**Full Changelog**: <actions/upload-artifact@v6...v7.0.0>

---
##### [\`v7\`](actions/upload-artifact@v6...v7)


---
##### [\`v6.0.0\`](actions/upload-artifact@v5.0.0...v6.0.0)


---
##### [\`v6\`](actions/upload-artifact@v5...v6)


---
##### [\`v5.0.0\`](actions/upload-artifact@v4.6.2...v5.0.0)


---
##### [\`v5\`](actions/upload-artifact@v4...v5)


---
##### [\`v4.6.2\`](https://github.com/actions/upload-artifact/releases/tag/v4.6.2)

#### What's Changed

- Update to use artifact 2.3.2 package & prepare for new upload-artifact release by [@salmanmkc](https://github.com/salmanmkc) in [#685](actions/upload-artifact#685)

#### New Contributors

- [@salmanmkc](https://github.com/salmanmkc) made their first contribution in [#685](actions/upload-artifact#685)

**Full Changelog**: <actions/upload-artifact@v4...v4.6.2>

---
##### [\`v4.6.1\`](https://github.com/actions/upload-artifact/releases/tag/v4.6.1)

#### What's Changed

- Update to use artifact 2.2.2 package by [@yacaovsnc](https://github.com/yacaovsnc) in [#673](actions/upload-artifact#673)

**Full Changelog**: <actions/upload-artifact@v4...v4.6.1>

---
##### [\`v4.6.0\`](https://github.com/actions/upload-artifact/releases/tag/v4.6.0)

#### What's Changed

- Expose env vars to control concurrency and timeout by [@yacaovsnc](https://github.com/yacaovsnc) in [#662](actions/upload-artifact#662)

**Full Changelog**: <actions/upload-artifact@v4...v4.6.0>

---
##### [\`v4.5.0\`](https://github.com/actions/upload-artifact/releases/tag/v4.5.0)

#### What's Changed

- fix: deprecated `Node.js` version in action by [@hamirmahal](https://github.com/hamirmahal) in [#578](actions/upload-artifact#578)
- Add new `artifact-digest` output by [@bdehamer](https://github.com/bdehamer) in [#656](actions/upload-artifact#656)

#### New Contributors

- [@hamirmahal](https://github.com/hamirmahal) made their first contribution in [#578](actions/upload-artifact#578)
- [@bdehamer](https://github.com/bdehamer) made their first contribution in [#656](actions/upload-artifact#656)

**Full Changelog**: <actions/upload-artifact@v4.4.3...v4.5.0>

---
##### [\`v4.4.3\`](https://github.com/actions/upload-artifact/releases/tag/v4.4.3)

#### What's Changed

- Undo indirect dependency updates from [#627](actions/upload-artifact#627) by [@joshmgross](https://github.com/joshmgross) in [#632](actions/upload-artifact#632)

**Full Changelog**: <actions/upload-artifact@v4.4.2...v4.4.3>

---
##### [\`v4.4.2\`](https://github.com/actions/upload-artifact/releases/tag/v4.4.2)

#### What's Changed

- Bump `@actions/artifact` to 2.1.11 by [@robherley](https://github.com/robherley) in [#627](actions/upload-artifact#627)
  - Includes fix for relative symlinks not resolving properly

**Full Changelog**: <actions/upload-artifact@v4.4.1...v4.4.2>

---
##### [\`v4.4.1\`](https://github.com/actions/upload-artifact/releases/tag/v4.4.1)

#### What's Changed

- Add a section about hidden files by [@joshmgross](https://github.com/joshmgross) in [#607](actions/upload-artifact#607)
- Add workflow file for publishing releases to immutable action package by [@Jcambass](https://github.com/Jcambass) in [#621](actions/upload-artifact#621)
- Update [@actions/artifact](https://github.com/actions/artifact) to latest version, includes symlink and timeout fixes by [@robherley](https://github.com/robherley) in [#625](actions/upload-artifact#625)

#### New Contributors

- [@Jcambass](https://github.com/Jcambass) made their first contribution in [#621](actions/upload-artifact#621)

**Full Changelog**: <actions/upload-artifact@v4.4.0...v4.4.1>

---
##### [\`v4.4.0\`](https://github.com/actions/upload-artifact/releases/tag/v4.4.0)

#### Notice: Breaking Changes ⚠️

We will no longer include hidden files and folders by default in the `upload-artifact` action of this version. This reduces the risk that credentials are accidentally uploaded into artifacts. Customers who need to continue to upload these files can use a new option, `include-hidden-files`, to continue to do so.

See ["Notice of upcoming deprecations and breaking changes in GitHub Actions runners"](https://github.blog/changelog/2024-08-19-notice-of-upcoming-deprecations-and-breaking-changes-in-github-actions-runners/) changelog and [this issue](actions/upload-artifact#602) for more details.

#### What's Changed

- Exclude hidden files by default by [@joshmgross](https://github.com/joshmgross) in [#598](actions/upload-artifact#598)

**Full Changelog**: <actions/upload-artifact@v4.3.6...v4.4.0>

---
##### [\`v4.3.6\`](https://github.com/actions/upload-artifact/releases/tag/v4.3.6)

#### What's Changed

- Revert to [@actions/artifact](https://github.com/actions/artifact) 2.1.8 by [@robherley](https://github.com/robherley) in [#594](actions/upload-artifact#594)

**Full Changelog**: <actions/upload-artifact@v4...v4.3.6>

---
##### [\`v4.3.5\`](https://github.com/actions/upload-artifact/releases/tag/v4.3.5)

#### What's Changed

- Bump [@actions/artifact](https://github.com/actions/artifact) to v2.1.9 by [@robherley](https://github.com/robherley) in [#588](actions/upload-artifact#588)
  - Fixed artifact upload chunk timeout logic [#1774](actions/toolkit#1774)
  - Use lazy stream to prevent issues with open file limits [#1771](actions/toolkit#1771)

**Full Changelog**: <actions/upload-artifact@v4.3.4...v4.3.5>

---
##### [\`v4.3.4\`](https://github.com/actions/upload-artifact/releases/tag/v4.3.4)

#### What's Changed

- Update [@actions/artifact](https://github.com/actions/artifact) version, bump dependencies by [@robherley](https://github.com/robherley) in [#584](actions/upload-artifact#584)

**Full Changelog**: <actions/upload-artifact@v4.3.3...v4.3.4>

---
##### [\`v4.3.3\`](https://github.com/actions/upload-artifact/releases/tag/v4.3.3)

#### What's Changed

- updating `@actions/artifact` dependency to v2.1.6 by [@eggyhead](https://github.com/eggyhead) in [#565](actions/upload-artifact#565)

**Full Changelog**: <actions/upload-artifact@v4.3.2...v4.3.3>

---
##### [\`v4.3.2\`](https://github.com/actions/upload-artifact/releases/tag/v4.3.2)

#### What's Changed

- Update release-new-action-version.yml by [@konradpabjan](https://github.com/konradpabjan) in [#516](actions/upload-artifact#516)
- Minor fix to the migration readme by [@andrewakim](https://github.com/andrewakim) in [#523](actions/upload-artifact#523)
- Update readme with v3/v2/v1 deprecation notice by [@robherley](https://github.com/robherley) in [#561](actions/upload-artifact#561)
- updating `@actions/artifact` dependency to v2.1.5 and `@actions/core` to v1.0.1 by [@eggyhead](https://github.com/eggyhead) in [#562](actions/upload-artifact#562)

#### New Contributors

- [@andrewakim](https://github.com/andrewakim) made their first contribution in [#523](actions/upload-artifact#523)

**Full Changelog**: <actions/upload-artifact@v4.3.1...v4.3.2>

---
##### [\`v4.3.1\`](https://github.com/actions/upload-artifact/releases/tag/v4.3.1)

- Bump [@actions/artifacts](https://github.com/actions/artifacts) to latest version to include [updated GHES host check](actions/toolkit#1648)

---
##### [\`v4.3.0\`](https://github.com/actions/upload-artifact/releases/tag/v4.3.0)

#### What's Changed

- Reorganize upload code in prep for merge logic & add more tests by [@robherley](https://github.com/robherley) in [#504](actions/upload-artifact#504)
- Add sub-action to merge artifacts by [@robherley](https://github.com/robherley) in [#505](actions/upload-artifact#505)

**Full Changelog**: <actions/upload-artifact@v4...v4.3.0>

---
##### [\`v4.2.0\`](https://github.com/actions/upload-artifact/releases/tag/v4.2.0)

#### What's Changed

- Ability to overwrite an Artifact by [@robherley](https://github.com/robherley) in [#501](actions/upload-artifact#501)

**Full Changelog**: <actions/upload-artifact@v4...v4.2.0>

---
##### [\`v4.1.0\`](https://github.com/actions/upload-artifact/releases/tag/v4.1.0)

#### What's Changed

- Add migrations docs by [@robherley](https://github.com/robherley) in [#482](actions/upload-artifact#482)
- Update README.md by [@samuelwine](https://github.com/samuelwine) in [#492](actions/upload-artifact#492)
- Support artifact-url output by [@konradpabjan](https://github.com/konradpabjan) in [#496](actions/upload-artifact#496)
- Update readme to reflect new 500 artifact per job limit by [@robherley](https://github.com/robherley) in [#497](actions/upload-artifact#497)

#### New Contributors

- [@samuelwine](https://github.com/samuelwine) made their first contribution in [#492](actions/upload-artifact#492)

**Full Changelog**: <actions/upload-artifact@v4...v4.1.0>
renovate Bot added a commit to sdwilsh/sOS that referenced this pull request May 22, 2026
@renovate
chore(deps): update actions/upload-artifact action to v7
29c9269 
##### [\`v7.0.1\`](https://github.com/actions/upload-artifact/releases/tag/v7.0.1)

##### What's Changed

- Update the readme with direct upload details by [@danwkennedy](https://github.com/danwkennedy) in [#795](actions/upload-artifact#795)
- Readme: bump all the example versions to v7 by [@danwkennedy](https://github.com/danwkennedy) in [#796](actions/upload-artifact#796)
- Include changes in typespec/ts-http-runtime 0.3.5 by [@yacaovsnc](https://github.com/yacaovsnc) in [#797](actions/upload-artifact#797)

**Full Changelog**: <actions/upload-artifact@v7...v7.0.1>

---
##### [\`v7.0.0\`](https://github.com/actions/upload-artifact/releases/tag/v7.0.0)

#### v7 What's new

##### Direct Uploads

Adds support for uploading single files directly (unzipped). Callers can set the new `archive` parameter to `false` to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The `name` parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.

##### ESM

To support new versions of the `@actions/*` packages, we've upgraded the package to ESM.

#### What's Changed

- Add proxy integration test by [@Link-](https://github.com/Link-) in [#754](actions/upload-artifact#754)
- Upgrade the module to ESM and bump dependencies by [@danwkennedy](https://github.com/danwkennedy) in [#762](actions/upload-artifact#762)
- Support direct file uploads by [@danwkennedy](https://github.com/danwkennedy) in [#764](actions/upload-artifact#764)

#### New Contributors

- [@Link-](https://github.com/Link-) made their first contribution in [#754](actions/upload-artifact#754)

**Full Changelog**: <actions/upload-artifact@v6...v7.0.0>

---
##### [\`v7\`](actions/upload-artifact@v6...v7)


---
##### [\`v6.0.0\`](actions/upload-artifact@v5.0.0...v6.0.0)


---
##### [\`v6\`](actions/upload-artifact@v5...v6)


---
##### [\`v5.0.0\`](actions/upload-artifact@v4.6.2...v5.0.0)


---
##### [\`v5\`](actions/upload-artifact@v4...v5)


---
##### [\`v4.6.2\`](https://github.com/actions/upload-artifact/releases/tag/v4.6.2)

#### What's Changed

- Update to use artifact 2.3.2 package & prepare for new upload-artifact release by [@salmanmkc](https://github.com/salmanmkc) in [#685](actions/upload-artifact#685)

#### New Contributors

- [@salmanmkc](https://github.com/salmanmkc) made their first contribution in [#685](actions/upload-artifact#685)

**Full Changelog**: <actions/upload-artifact@v4...v4.6.2>

---
##### [\`v4.6.1\`](https://github.com/actions/upload-artifact/releases/tag/v4.6.1)

#### What's Changed

- Update to use artifact 2.2.2 package by [@yacaovsnc](https://github.com/yacaovsnc) in [#673](actions/upload-artifact#673)

**Full Changelog**: <actions/upload-artifact@v4...v4.6.1>

---
##### [\`v4.6.0\`](https://github.com/actions/upload-artifact/releases/tag/v4.6.0)

#### What's Changed

- Expose env vars to control concurrency and timeout by [@yacaovsnc](https://github.com/yacaovsnc) in [#662](actions/upload-artifact#662)

**Full Changelog**: <actions/upload-artifact@v4...v4.6.0>

---
##### [\`v4.5.0\`](https://github.com/actions/upload-artifact/releases/tag/v4.5.0)

#### What's Changed

- fix: deprecated `Node.js` version in action by [@hamirmahal](https://github.com/hamirmahal) in [#578](actions/upload-artifact#578)
- Add new `artifact-digest` output by [@bdehamer](https://github.com/bdehamer) in [#656](actions/upload-artifact#656)

#### New Contributors

- [@hamirmahal](https://github.com/hamirmahal) made their first contribution in [#578](actions/upload-artifact#578)
- [@bdehamer](https://github.com/bdehamer) made their first contribution in [#656](actions/upload-artifact#656)

**Full Changelog**: <actions/upload-artifact@v4.4.3...v4.5.0>

---
##### [\`v4.4.3\`](https://github.com/actions/upload-artifact/releases/tag/v4.4.3)

#### What's Changed

- Undo indirect dependency updates from [#627](actions/upload-artifact#627) by [@joshmgross](https://github.com/joshmgross) in [#632](actions/upload-artifact#632)

**Full Changelog**: <actions/upload-artifact@v4.4.2...v4.4.3>

---
##### [\`v4.4.2\`](https://github.com/actions/upload-artifact/releases/tag/v4.4.2)

#### What's Changed

- Bump `@actions/artifact` to 2.1.11 by [@robherley](https://github.com/robherley) in [#627](actions/upload-artifact#627)
  - Includes fix for relative symlinks not resolving properly

**Full Changelog**: <actions/upload-artifact@v4.4.1...v4.4.2>

---
##### [\`v4.4.1\`](https://github.com/actions/upload-artifact/releases/tag/v4.4.1)

#### What's Changed

- Add a section about hidden files by [@joshmgross](https://github.com/joshmgross) in [#607](actions/upload-artifact#607)
- Add workflow file for publishing releases to immutable action package by [@Jcambass](https://github.com/Jcambass) in [#621](actions/upload-artifact#621)
- Update [@actions/artifact](https://github.com/actions/artifact) to latest version, includes symlink and timeout fixes by [@robherley](https://github.com/robherley) in [#625](actions/upload-artifact#625)

#### New Contributors

- [@Jcambass](https://github.com/Jcambass) made their first contribution in [#621](actions/upload-artifact#621)

**Full Changelog**: <actions/upload-artifact@v4.4.0...v4.4.1>

---
##### [\`v4.4.0\`](https://github.com/actions/upload-artifact/releases/tag/v4.4.0)

#### Notice: Breaking Changes ⚠️

We will no longer include hidden files and folders by default in the `upload-artifact` action of this version. This reduces the risk that credentials are accidentally uploaded into artifacts. Customers who need to continue to upload these files can use a new option, `include-hidden-files`, to continue to do so.

See ["Notice of upcoming deprecations and breaking changes in GitHub Actions runners"](https://github.blog/changelog/2024-08-19-notice-of-upcoming-deprecations-and-breaking-changes-in-github-actions-runners/) changelog and [this issue](actions/upload-artifact#602) for more details.

#### What's Changed

- Exclude hidden files by default by [@joshmgross](https://github.com/joshmgross) in [#598](actions/upload-artifact#598)

**Full Changelog**: <actions/upload-artifact@v4.3.6...v4.4.0>

---
##### [\`v4.3.6\`](https://github.com/actions/upload-artifact/releases/tag/v4.3.6)

#### What's Changed

- Revert to [@actions/artifact](https://github.com/actions/artifact) 2.1.8 by [@robherley](https://github.com/robherley) in [#594](actions/upload-artifact#594)

**Full Changelog**: <actions/upload-artifact@v4...v4.3.6>

---
##### [\`v4.3.5\`](https://github.com/actions/upload-artifact/releases/tag/v4.3.5)

#### What's Changed

- Bump [@actions/artifact](https://github.com/actions/artifact) to v2.1.9 by [@robherley](https://github.com/robherley) in [#588](actions/upload-artifact#588)
  - Fixed artifact upload chunk timeout logic [#1774](actions/toolkit#1774)
  - Use lazy stream to prevent issues with open file limits [#1771](actions/toolkit#1771)

**Full Changelog**: <actions/upload-artifact@v4.3.4...v4.3.5>

---
##### [\`v4.3.4\`](https://github.com/actions/upload-artifact/releases/tag/v4.3.4)

#### What's Changed

- Update [@actions/artifact](https://github.com/actions/artifact) version, bump dependencies by [@robherley](https://github.com/robherley) in [#584](actions/upload-artifact#584)

**Full Changelog**: <actions/upload-artifact@v4.3.3...v4.3.4>

---
##### [\`v4.3.3\`](https://github.com/actions/upload-artifact/releases/tag/v4.3.3)

#### What's Changed

- updating `@actions/artifact` dependency to v2.1.6 by [@eggyhead](https://github.com/eggyhead) in [#565](actions/upload-artifact#565)

**Full Changelog**: <actions/upload-artifact@v4.3.2...v4.3.3>

---
##### [\`v4.3.2\`](https://github.com/actions/upload-artifact/releases/tag/v4.3.2)

#### What's Changed

- Update release-new-action-version.yml by [@konradpabjan](https://github.com/konradpabjan) in [#516](actions/upload-artifact#516)
- Minor fix to the migration readme by [@andrewakim](https://github.com/andrewakim) in [#523](actions/upload-artifact#523)
- Update readme with v3/v2/v1 deprecation notice by [@robherley](https://github.com/robherley) in [#561](actions/upload-artifact#561)
- updating `@actions/artifact` dependency to v2.1.5 and `@actions/core` to v1.0.1 by [@eggyhead](https://github.com/eggyhead) in [#562](actions/upload-artifact#562)

#### New Contributors

- [@andrewakim](https://github.com/andrewakim) made their first contribution in [#523](actions/upload-artifact#523)

**Full Changelog**: <actions/upload-artifact@v4.3.1...v4.3.2>

---
##### [\`v4.3.1\`](https://github.com/actions/upload-artifact/releases/tag/v4.3.1)

- Bump [@actions/artifacts](https://github.com/actions/artifacts) to latest version to include [updated GHES host check](actions/toolkit#1648)

---
##### [\`v4.3.0\`](https://github.com/actions/upload-artifact/releases/tag/v4.3.0)

#### What's Changed

- Reorganize upload code in prep for merge logic & add more tests by [@robherley](https://github.com/robherley) in [#504](actions/upload-artifact#504)
- Add sub-action to merge artifacts by [@robherley](https://github.com/robherley) in [#505](actions/upload-artifact#505)

**Full Changelog**: <actions/upload-artifact@v4...v4.3.0>

---
##### [\`v4.2.0\`](https://github.com/actions/upload-artifact/releases/tag/v4.2.0)

#### What's Changed

- Ability to overwrite an Artifact by [@robherley](https://github.com/robherley) in [#501](actions/upload-artifact#501)

**Full Changelog**: <actions/upload-artifact@v4...v4.2.0>

---
##### [\`v4.1.0\`](https://github.com/actions/upload-artifact/releases/tag/v4.1.0)

#### What's Changed

- Add migrations docs by [@robherley](https://github.com/robherley) in [#482](actions/upload-artifact#482)
- Update README.md by [@samuelwine](https://github.com/samuelwine) in [#492](actions/upload-artifact#492)
- Support artifact-url output by [@konradpabjan](https://github.com/konradpabjan) in [#496](actions/upload-artifact#496)
- Update readme to reflect new 500 artifact per job limit by [@robherley](https://github.com/robherley) in [#497](actions/upload-artifact#497)

#### New Contributors

- [@samuelwine](https://github.com/samuelwine) made their first contribution in [#492](actions/upload-artifact#492)

**Full Changelog**: <actions/upload-artifact@v4...v4.1.0>
@benjih benjih mentioned this pull request Jun 18, 2026
Merged
luketainton pushed a commit to luketainton/repos_epage-go that referenced this pull request Jun 19, 2026
@luketainton
chore(deps): update github artifact actions (major) (#10)
bdf95a0 
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | action | major | `v3` → `v7` |

---

### Release Notes

<details>
<summary>actions/upload-artifact (actions/upload-artifact)</summary>

### [`v7.0.1`](https://github.com/actions/upload-artifact/releases/tag/v7.0.1)

[Compare Source](actions/upload-artifact@v7...v7.0.1)

#### What's Changed

- Update the readme with direct upload details by [@&#8203;danwkennedy](https://github.com/danwkennedy) in [#&#8203;795](actions/upload-artifact#795)
- Readme: bump all the example versions to v7 by [@&#8203;danwkennedy](https://github.com/danwkennedy) in [#&#8203;796](actions/upload-artifact#796)
- Include changes in typespec/ts-http-runtime 0.3.5 by [@&#8203;yacaovsnc](https://github.com/yacaovsnc) in [#&#8203;797](actions/upload-artifact#797)

**Full Changelog**: <actions/upload-artifact@v7...v7.0.1>

### [`v7.0.0`](https://github.com/actions/upload-artifact/releases/tag/v7.0.0)

[Compare Source](actions/upload-artifact@v7...v7)

#### v7 What's new

##### Direct Uploads

Adds support for uploading single files directly (unzipped). Callers can set the new `archive` parameter to `false` to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The `name` parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.

##### ESM

To support new versions of the `@actions/*` packages, we've upgraded the package to ESM.

#### What's Changed

- Add proxy integration test by [@&#8203;Link-](https://github.com/Link-) in [#&#8203;754](actions/upload-artifact#754)
- Upgrade the module to ESM and bump dependencies by [@&#8203;danwkennedy](https://github.com/danwkennedy) in [#&#8203;762](actions/upload-artifact#762)
- Support direct file uploads by [@&#8203;danwkennedy](https://github.com/danwkennedy) in [#&#8203;764](actions/upload-artifact#764)

#### New Contributors

- [@&#8203;Link-](https://github.com/Link-) made their first contribution in [#&#8203;754](actions/upload-artifact#754)

**Full Changelog**: <actions/upload-artifact@v6...v7.0.0>

### [`v7`](actions/upload-artifact@v6.0.0...v7)

[Compare Source](actions/upload-artifact@v6.0.0...v7)

### [`v6.0.0`](https://github.com/actions/upload-artifact/releases/tag/v6.0.0)

[Compare Source](actions/upload-artifact@v6.0.0...v6.0.0)

#### v6 - What's new

> \[!IMPORTANT]
> actions/upload-artifact\@&#8203;v6 now runs on Node.js 24 (`runs.using: node24`) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.

##### Node.js 24

This release updates the runtime to Node.js 24. v5 had preliminary support for Node.js 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.

#### What's Changed

- Upload Artifact Node 24 support by [@&#8203;salmanmkc](https://github.com/salmanmkc) in [#&#8203;719](actions/upload-artifact#719)
- fix: update [@&#8203;actions/artifact](https://github.com/actions/artifact) for Node.js 24 punycode deprecation by [@&#8203;salmanmkc](https://github.com/salmanmkc) in [#&#8203;744](actions/upload-artifact#744)
- prepare release v6.0.0 for Node.js 24 support by [@&#8203;salmanmkc](https://github.com/salmanmkc) in [#&#8203;745](actions/upload-artifact#745)

**Full Changelog**: <actions/upload-artifact@v5.0.0...v6.0.0>

### [`v6`](actions/upload-artifact@v5.0.0...v6.0.0)

[Compare Source](actions/upload-artifact@v5.0.0...v6.0.0)

### [`v5.0.0`](https://github.com/actions/upload-artifact/releases/tag/v5.0.0)

[Compare Source](actions/upload-artifact@v5.0.0...v5.0.0)

#### What's Changed

**BREAKING CHANGE:** this update supports Node `v24.x`. This is not a breaking change per-se but we're treating it as such.

- Update README.md by [@&#8203;GhadimiR](https://github.com/GhadimiR) in [#&#8203;681](actions/upload-artifact#681)
- Update README.md by [@&#8203;nebuk89](https://github.com/nebuk89) in [#&#8203;712](actions/upload-artifact#712)
- Readme: spell out the first use of GHES by [@&#8203;danwkennedy](https://github.com/danwkennedy) in [#&#8203;727](actions/upload-artifact#727)
- Update GHES guidance to include reference to Node 20 version by [@&#8203;patrikpolyak](https://github.com/patrikpolyak) in [#&#8203;725](actions/upload-artifact#725)
- Bump `@actions/artifact` to `v4.0.0`
- Prepare `v5.0.0` by [@&#8203;danwkennedy](https://github.com/danwkennedy) in [#&#8203;734](actions/upload-artifact#734)

#### New Contributors

- [@&#8203;GhadimiR](https://github.com/GhadimiR) made their first contribution in [#&#8203;681](actions/upload-artifact#681)
- [@&#8203;nebuk89](https://github.com/nebuk89) made their first contribution in [#&#8203;712](actions/upload-artifact#712)
- [@&#8203;danwkennedy](https://github.com/danwkennedy) made their first contribution in [#&#8203;727](actions/upload-artifact#727)
- [@&#8203;patrikpolyak](https://github.com/patrikpolyak) made their first contribution in [#&#8203;725](actions/upload-artifact#725)

**Full Changelog**: <actions/upload-artifact@v4...v5.0.0>

### [`v5`](actions/upload-artifact@v4.6.2...v5.0.0)

[Compare Source](actions/upload-artifact@v4.6.2...v5.0.0)

### [`v4.6.2`](https://github.com/actions/upload-artifact/releases/tag/v4.6.2)

[Compare Source](actions/upload-artifact@v4.6.1...v4.6.2)

#### What's Changed

- Update to use artifact 2.3.2 package & prepare for new upload-artifact release by [@&#8203;salmanmkc](https://github.com/salmanmkc) in [#&#8203;685](actions/upload-artifact#685)

#### New Contributors

- [@&#8203;salmanmkc](https://github.com/salmanmkc) made their first contribution in [#&#8203;685](actions/upload-artifact#685)

**Full Changelog**: <actions/upload-artifact@v4...v4.6.2>

### [`v4.6.1`](https://github.com/actions/upload-artifact/releases/tag/v4.6.1)

[Compare Source](actions/upload-artifact@v4.6.0...v4.6.1)

#### What's Changed

- Update to use artifact 2.2.2 package by [@&#8203;yacaovsnc](https://github.com/yacaovsnc) in [#&#8203;673](actions/upload-artifact#673)

**Full Changelog**: <actions/upload-artifact@v4...v4.6.1>

### [`v4.6.0`](https://github.com/actions/upload-artifact/releases/tag/v4.6.0)

[Compare Source](actions/upload-artifact@v4.5.0...v4.6.0)

#### What's Changed

- Expose env vars to control concurrency and timeout by [@&#8203;yacaovsnc](https://github.com/yacaovsnc) in [#&#8203;662](actions/upload-artifact#662)

**Full Changelog**: <actions/upload-artifact@v4...v4.6.0>

### [`v4.5.0`](https://github.com/actions/upload-artifact/releases/tag/v4.5.0)

[Compare Source](actions/upload-artifact@v4.4.3...v4.5.0)

#### What's Changed

- fix: deprecated `Node.js` version in action by [@&#8203;hamirmahal](https://github.com/hamirmahal) in [#&#8203;578](actions/upload-artifact#578)
- Add new `artifact-digest` output by [@&#8203;bdehamer](https://github.com/bdehamer) in [#&#8203;656](actions/upload-artifact#656)

#### New Contributors

- [@&#8203;hamirmahal](https://github.com/hamirmahal) made their first contribution in [#&#8203;578](actions/upload-artifact#578)
- [@&#8203;bdehamer](https://github.com/bdehamer) made their first contribution in [#&#8203;656](actions/upload-artifact#656)

**Full Changelog**: <actions/upload-artifact@v4.4.3...v4.5.0>

### [`v4.4.3`](https://github.com/actions/upload-artifact/releases/tag/v4.4.3)

[Compare Source](actions/upload-artifact@v4.4.2...v4.4.3)

#### What's Changed

- Undo indirect dependency updates from [#&#8203;627](actions/upload-artifact#627) by [@&#8203;joshmgross](https://github.com/joshmgross) in [#&#8203;632](actions/upload-artifact#632)

**Full Changelog**: <actions/upload-artifact@v4.4.2...v4.4.3>

### [`v4.4.2`](https://github.com/actions/upload-artifact/releases/tag/v4.4.2)

[Compare Source](actions/upload-artifact@v4.4.1...v4.4.2)

#### What's Changed

- Bump `@actions/artifact` to 2.1.11 by [@&#8203;robherley](https://github.com/robherley) in [#&#8203;627](actions/upload-artifact#627)
  - Includes fix for relative symlinks not resolving properly

**Full Changelog**: <actions/upload-artifact@v4.4.1...v4.4.2>

### [`v4.4.1`](https://github.com/actions/upload-artifact/releases/tag/v4.4.1)

[Compare Source](actions/upload-artifact@v4.4.0...v4.4.1)

#### What's Changed

- Add a section about hidden files by [@&#8203;joshmgross](https://github.com/joshmgross) in [#&#8203;607](actions/upload-artifact#607)
- Add workflow file for publishing releases to immutable action package by [@&#8203;Jcambass](https://github.com/Jcambass) in [#&#8203;621](actions/upload-artifact#621)
- Update [@&#8203;actions/artifact](https://github.com/actions/artifact) to latest version, includes symlink and timeout fixes by [@&#8203;robherley](https://github.com/robherley) in [#&#8203;625](actions/upload-artifact#625)

#### New Contributors

- [@&#8203;Jcambass](https://github.com/Jcambass) made their first contribution in [#&#8203;621](actions/upload-artifact#621)

**Full Changelog**: <actions/upload-artifact@v4.4.0...v4.4.1>

### [`v4.4.0`](https://github.com/actions/upload-artifact/releases/tag/v4.4.0)

[Compare Source](actions/upload-artifact@v4.3.6...v4.4.0)

#### Notice: Breaking Changes ⚠️

We will no longer include hidden files and folders by default in the `upload-artifact` action of this version. This reduces the risk that credentials are accidentally uploaded into artifacts. Customers who need to continue to upload these files can use a new option, `include-hidden-files`, to continue to do so.

See ["Notice of upcoming deprecations and breaking changes in GitHub Actions runners"](https://github.blog/changelog/2024-08-19-notice-of-upcoming-deprecations-and-breaking-changes-in-github-actions-runners/) changelog and [this issue](actions/upload-artifact#602) for more details.

#### What's Changed

- Exclude hidden files by default by [@&#8203;joshmgross](https://github.com/joshmgross) in [#&#8203;598](actions/upload-artifact#598)

**Full Changelog**: <actions/upload-artifact@v4.3.6...v4.4.0>

### [`v4.3.6`](https://github.com/actions/upload-artifact/releases/tag/v4.3.6)

[Compare Source](actions/upload-artifact@v4.3.5...v4.3.6)

#### What's Changed

- Revert to [@&#8203;actions/artifact](https://github.com/actions/artifact) 2.1.8 by [@&#8203;robherley](https://github.com/robherley) in [#&#8203;594](actions/upload-artifact#594)

**Full Changelog**: <actions/upload-artifact@v4...v4.3.6>

### [`v4.3.5`](https://github.com/actions/upload-artifact/releases/tag/v4.3.5)

[Compare Source](actions/upload-artifact@v4.3.4...v4.3.5)

#### What's Changed

- Bump [@&#8203;actions/artifact](https://github.com/actions/artifact) to v2.1.9 by [@&#8203;robherley](https://github.com/robherley) in [#&#8203;588](actions/upload-artifact#588)
  - Fixed artifact upload chunk timeout logic [#&#8203;1774](actions/toolkit#1774)
  - Use lazy stream to prevent issues with open file limits [#&#8203;1771](actions/toolkit#1771)

**Full Changelog**: <actions/upload-artifact@v4.3.4...v4.3.5>

### [`v4.3.4`](https://github.com/actions/upload-artifact/releases/tag/v4.3.4)

[Compare Source](actions/upload-artifact@v4.3.3...v4.3.4)

#### What's Changed

- Update [@&#8203;actions/artifact](https://github.com/actions/artifact) version, bump dependencies by [@&#8203;robherley](https://github.com/robherley) in [#&#8203;584](actions/upload-artifact#584)

**Full Changelog**: <actions/upload-artifact@v4.3.3...v4.3.4>

### [`v4.3.3`](https://github.com/actions/upload-artifact/releases/tag/v4.3.3)

[Compare Source](actions/upload-artifact@v4.3.2...v4.3.3)

#### What's Changed

- updating `@actions/artifact` dependency to v2.1.6 by [@&#8203;eggyhead](https://github.com/eggyhead) in [#&#8203;565](actions/upload-artifact#565)

**Full Changelog**: <actions/upload-artifact@v4.3.2...v4.3.3>

### [`v4.3.2`](https://github.com/actions/upload-artifact/releases/tag/v4.3.2)

[Compare Source](actions/upload-artifact@v4.3.1...v4.3.2)

#### What's Changed

- Update release-new-action-version.yml by [@&#8203;konradpabjan](https://github.com/konradpabjan) in [#&#8203;516](actions/upload-artifact#516)
- Minor fix to the migration readme by [@&#8203;andrewakim](https://github.com/andrewakim) in [#&#8203;523](actions/upload-artifact#523)
- Update readme with v3/v2/v1 deprecation notice by [@&#8203;robherley](https://github.com/robherley) in [#&#8203;561](actions/upload-artifact#561)
- updating `@actions/artifact` dependency to v2.1.5 and `@actions/core` to v1.0.1 by [@&#8203;eggyhead](https://github.com/eggyhead) in [#&#8203;562](actions/upload-artifact#562)

#### New Contributors

- [@&#8203;andrewakim](https://github.com/andrewakim) made their first contribution in [#&#8203;523](actions/upload-artifact#523)

**Full Changelog**: <actions/upload-artifact@v4.3.1...v4.3.2>

### [`v4.3.1`](https://github.com/actions/upload-artifact/releases/tag/v4.3.1)

[Compare Source](actions/upload-artifact@v4.3.0...v4.3.1)

- Bump [@&#8203;actions/artifacts](https://github.com/actions/artifacts) to latest version to include [updated GHES host check](actions/toolkit#1648)

### [`v4.3.0`](https://github.com/actions/upload-artifact/releases/tag/v4.3.0)

[Compare Source](actions/upload-artifact@v4.2.0...v4.3.0)

#### What's Changed

- Reorganize upload code in prep for merge logic & add more tests by [@&#8203;robherley](https://github.com/robherley) in [#&#8203;504](actions/upload-artifact#504)
- Add sub-action to merge artifacts by [@&#8203;robherley](https://github.com/robherley) in [#&#8203;505](actions/upload-artifact#505)

**Full Changelog**: <actions/upload-artifact@v4...v4.3.0>

### [`v4.2.0`](https://github.com/actions/upload-artifact/releases/tag/v4.2.0)

[Compare Source](actions/upload-artifact@v4.1.0...v4.2.0)

#### What's Changed

- Ability to overwrite an Artifact by [@&#8203;robherley](https://github.com/robherley) in [#&#8203;501](actions/upload-artifact#501)

**Full Changelog**: <actions/upload-artifact@v4...v4.2.0>

### [`v4.1.0`](https://github.com/actions/upload-artifact/releases/tag/v4.1.0)

[Compare Source](actions/upload-artifact@v4...v4.1.0)

#### What's Changed

- Add migrations docs by [@&#8203;robherley](https://github.com/robherley) in [#&#8203;482](actions/upload-artifact#482)
- Update README.md by [@&#8203;samuelwine](https://github.com/samuelwine) in [#&#8203;492](actions/upload-artifact#492)
- Support artifact-url output by [@&#8203;konradpabjan](https://github.com/konradpabjan) in [#&#8203;496](actions/upload-artifact#496)
- Update readme to reflect new 500 artifact per job limit by [@&#8203;robherley](https://github.com/robherley) in [#&#8203;497](actions/upload-artifact#497)

#### New Contributors

- [@&#8203;samuelwine](https://github.com/samuelwine) made their first contribution in [#&#8203;492](actions/upload-artifact#492)

**Full Changelog**: <actions/upload-artifact@v4...v4.1.0>

### [`v4.0.0`](https://github.com/actions/upload-artifact/releases/tag/v4.0.0)

[Compare Source](actions/upload-artifact@v4...v4)

#### What's Changed

The release of upload-artifact\@&#8203;v4 and download-artifact\@&#8203;v4 are major changes to the backend architecture of Artifacts. They have numerous performance and behavioral improvements.

ℹ️ However, this is a major update that includes breaking changes. Artifacts created with versions v3 and below are not compatible with the v4 actions. Uploads and downloads *must* use the same major actions versions. There are also key differences from previous versions that may require updates to your workflows.

For more information, please see:

1. The [changelog](https://github.blog/changelog/2023-12-14-github-actions-artifacts-v4-is-now-generally-available/) post.
2. The [README](https://github.com/actions/upload-artifact/blob/main/README.md).
3. The [migration documentation](https://github.com/actions/upload-artifact/blob/main/docs/MIGRATION.md).
4. As well as the underlying npm package, [@&#8203;actions/artifact](https://github.com/actions/toolkit/tree/main/packages/artifact) documentation.

#### New Contributors

- [@&#8203;vmjoseph](https://github.com/vmjoseph) made their first contribution in [#&#8203;464](actions/upload-artifact#464)

**Full Changelog**: <actions/upload-artifact@v3...v4.0.0>

### [`v4`](actions/upload-artifact@v3.2.2...v4)

[Compare Source](actions/upload-artifact@v3.2.2...v4)

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](undefined) if that's undesired.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTAuMCIsInVwZGF0ZWRJblZlciI6IjQzLjIzMy4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJ0eXBlL2RlcGVuZGVuY2llcyJdfQ==-->

Reviewed-on: https://git.tainton.uk/repos/epage-go/pulls/10
Co-authored-by: renovate[bot] <renovate-bot@git.tainton.uk>
Co-committed-by: renovate[bot] <renovate-bot@git.tainton.uk>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

2 more reviewers

@chrisimap32 chrisimap32 chrisimap32 requested changes

@yacaovsnc yacaovsnc yacaovsnc approved these changes

Reviewers whose approvals may not affect merge requirements

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

4 participants

@eggyhead @chrisimap32 @yacaovsnc @github-advanced-security