Skip to content

build(deps): bump actions/upload-artifact from 4 to 7#8

Closed
dependabot[bot] wants to merge 61 commits into
mainfrom
dependabot/github_actions/actions/upload-artifact-7
Closed

build(deps): bump actions/upload-artifact from 4 to 7#8
dependabot[bot] wants to merge 61 commits into
mainfrom
dependabot/github_actions/actions/upload-artifact-7

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github Apr 6, 2026

Bumps actions/upload-artifact from 4 to 7.

Release notes

Sourced from actions/upload-artifact's releases.

v7.0.0

v7 What's new

Direct Uploads

Adds support for uploading single files directly (unzipped). Callers can set the new archive parameter to false to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The name parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.

ESM

To support new versions of the @actions/* packages, we've upgraded the package to ESM.

What's Changed

New Contributors

Full Changelog: actions/upload-artifact@v6...v7.0.0

v6.0.0

v6 - What's new

[!IMPORTANT] actions/upload-artifact@v6 now runs on Node.js 24 (runs.using: node24) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.

Node.js 24

This release updates the runtime to Node.js 24. v5 had preliminary support for Node.js 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.

What's Changed

Full Changelog: actions/upload-artifact@v5.0.0...v6.0.0

v5.0.0

What's Changed

BREAKING CHANGE: this update supports Node v24.x. This is not a breaking change per-se but we're treating it as such.

... (truncated)

Commits
  • bbbca2d Support direct file uploads (#764)
  • 589182c Upgrade the module to ESM and bump dependencies (#762)
  • 47309c9 Merge pull request #754 from actions/Link-/add-proxy-integration-tests
  • 02a8460 Add proxy integration test
  • b7c566a Merge pull request #745 from actions/upload-artifact-v6-release
  • e516bc8 docs: correct description of Node.js 24 support in README
  • ddc45ed docs: update README to correct action name for Node.js 24 support
  • 615b319 chore: release v6.0.0 for Node.js 24 support
  • 017748b Merge pull request #744 from actions/fix-storage-blob
  • 38d4c79 chore: rebuild dist
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

AusAgentSmith added 30 commits March 28, 2026 14:10
Add optional proxy_url field to ServerConfig (socks5://[user:pass@]host:port).
When set, NNTP connections route through the SOCKS5 proxy via tokio-socks,
with TLS wrapping applied over the tunneled connection.
Add max-width constraint to history name column to prevent long Usenet
filenames from pushing the table wider than its container. Also update
README with benchmarks, feature table, and streamlined docs.
- Handle 481/482 as Auth errors in USER, PASS, ARTICLE, STAT, GROUP,
  XOVER, BODY handlers and ARTICLE pipeline. Previously 482 fell to
  catch-all producing synthetic error text providers don't recognise.
- Add Auth to pipeline fatal error list so pipelines abort on 481/482.
- Separate 502 from 482 in USER handler (was grouped incorrectly).
Replace local crates/nzb-nntp with the standalone crate from
github.com/AusAgentSmith/nzb-nntp. nzb-core re-exports ServerConfig
and Article from nzb-nntp so all consuming code is unchanged.
…ation

With pipelining=20, CPU-bound yEnc decode+assemble work between yield
points starves the tokio runtime, preventing the HTTP server from
accepting connections (Recv-Q 538 observed).
Database (migration v5):
- groups table with subscription and scan watermark
- headers table with FTS5 full-text search
- Auto-sync triggers for FTS index

Models:
- GroupRow, HeaderRow, ThreadSummary, ThreadArticle
- MarkReadInput, DownloadSelectedInput

API endpoints (15 new routes under /api/groups):
- Group list/get/subscribe/unsubscribe/refresh (LIST ACTIVE)
- Group status (new available count)
- Header list with FTS5 search, fetch (background XOVER)
- Thread list and detail view
- Mark read (bulk + all)
- Download selected (generates NZB → adds to queue)
- Article fetch from NNTP

Plus: GUI mockup (mockup.html) and uplift plan
Frontend:
- Angular 21 with Material, zoneless change detection
- Tab-based layout: Queue, Groups, History, RSS, Settings, Logs
- Top bar with speed display, pause/resume
- Status bar with connection and disk info
- Queue view with job progress, speed, ETA, pause/resume/delete
- Stub components for remaining tabs
- Dark theme matching mockup

Backend:
- rust-embed now points to Angular build output
- SPA fallback serves index.html for client-side routing
- Dev proxy config for ng serve
Groups view features:
- Sidebar with subscribed groups and unread badges
- Header list with column headers, checkbox selection
- FTS5 search via toolbar search box
- Article preview pane (click to preview, auto-mark read)
- "Download Selected" button: select articles → NZB → queue
- "Fetch Headers" button with progress indication
- "Mark All Read" button
- Group browser dialog for subscribing to new groups
- "Refresh from Server" to fetch LIST ACTIVE
History: completed/failed downloads with retry, clear all
Settings: server list with test/delete, speed limit config
Logs: real-time log polling with auto-scroll, color-coded levels
RSS: feed list, download rules, recent items with one-click download

All tabs connected to existing rustnzbd API endpoints.
All 6 tabs now functional matching the mockup design.
Playwright (15 tests):
- Health, app load, tab navigation, status bar
- Queue, groups, headers, search, checkbox selection
- Settings, history, logs tab loading
- API endpoint tests

Dockerfile: Add Node.js for Angular build
Fixes CI where Node.js is unavailable - rust-embed needs at
least one file in the folder to compile.
Port fix from Arz commit 4e2ada. The queue manager had a TOCTOU race
in add_job() and start_next_queued() — the active download count was
checked under a lock, released, then a new download started under a
separate lock. Concurrent callers could both pass the limit check,
causing all queued downloads to start simultaneously.

Fix: new claim_next_download_slot() atomically checks the count and
marks a queued job as Downloading under a single lock acquisition.
add_job() now always inserts as Queued first, then delegates to
start_next_queued(). resume_job() also marks Downloading atomically.
start_download() renamed to launch_download() — reads from existing
map entry instead of taking ownership.
Fixes Tauri desktop build which compiles nzb-web as a dependency
without running the workspace root build.rs.
AusAgentSmith and others added 22 commits March 31, 2026 08:38
Update vendored nzb-nntp with ramp_up_delay_ms (default 250ms) that
staggers new connection creation. Add spawn stagger in download engine
so workers connect gradually instead of bursting. Add ramp-up delay
field to Angular settings UI.
Drop direct nzb-nntp dependency from nzb-web, root crate, and tests.
All NNTP types are now accessed through nzb-core::nzb_nntp, enabled
by the upstream nzb-core re-export. Adds local patch for nzb-core to
pick up the re-export change.
Drop nzb-core as a direct dependency from nzb-web. All nzb-core types
accessed via nzb_postproc::nzb_core re-export. Adds local patch for
nzb-postproc to pick up the re-export change.
Drop direct nzb-core dependency from root binary. All access goes
through nzb-web's public nzb_core re-export. Test files updated
to match.
All nzb crate access goes through nzb-web re-exports. Root binary
dep tree now shows only nzb-web.
Remove vendored crates/nzb-nntp and crates/nzb-web, replacing them
with shared libraries from ~/Working/libs/. App-specific files
(handlers.rs, server.rs, group_handlers.rs) are moved to src/ with
imports updated to reference nzb_web:: for engine modules.

- Point all nzb-* workspace deps to shared lib paths
- Remove [patch] sections (no longer needed with path deps)
- Add groups-db feature forwarding through nzb-postproc and nzb-web
- Add with_db() method to shared QueueManager for direct DB access
- Add handler/server dependencies (axum, rust-embed, etc.) to main package
Update all crate deps to latest compatible versions. Bump nzb-web
git tag from v0.1.0 to v0.2.3 to pick up recent fixes. Update
CLAUDE.md to reflect current repo layout (no local crates/ dir,
external git deps).
Pipelined download workers could spin forever when all remaining
articles had the current server in tried_servers, starving Tokio
threads and making the HTTP server unresponsive. Also fixes
double-counting of completed files on article requeue.
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4 to 7.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@v4...v7)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Apr 6, 2026
@dependabot @github
Copy link
Copy Markdown
Author

dependabot Bot commented on behalf of github Apr 8, 2026

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot Bot deleted the dependabot/github_actions/actions/upload-artifact-7 branch April 8, 2026 01:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant