Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 27, 2025

Bumps actions/upload-artifact from 4 to 5.

Release notes

Sourced from actions/upload-artifact's releases.

v5.0.0

What's Changed

BREAKING CHANGE: this update supports Node v24.x. This is not a breaking change per-se but we're treating it as such.

New Contributors

Full Changelog: actions/upload-artifact@v4...v5.0.0

v4.6.2

What's Changed

New Contributors

Full Changelog: actions/upload-artifact@v4...v4.6.2

v4.6.1

What's Changed

Full Changelog: actions/upload-artifact@v4...v4.6.1

v4.6.0

What's Changed

Full Changelog: actions/upload-artifact@v4...v4.6.0

v4.5.0

What's Changed

New Contributors

... (truncated)

Commits
  • 330a01c Merge pull request #734 from actions/danwkennedy/prepare-5.0.0
  • 03f2824 Update github.dep.yml
  • 905a1ec Prepare v5.0.0
  • 2d9f9cd Merge pull request #725 from patrikpolyak/patch-1
  • 9687587 Merge branch 'main' into patch-1
  • 2848b2c Merge pull request #727 from danwkennedy/patch-1
  • 9b51177 Spell out the first use of GHES
  • cd231ca Update GHES guidance to include reference to Node 20 version
  • de65e23 Merge pull request #712 from actions/nebuk89-patch-1
  • 8747d8c Update README.md
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4 to 5.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@v4...v5)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Oct 27, 2025
@dependabot dependabot bot temporarily deployed to branch-preview October 27, 2025 06:52 Inactive
@github-actions
Copy link
Contributor

github-actions bot commented Oct 27, 2025

🚀 Deployment Status: Building 🔵

🔗 Quick Actions:


📝 Recent Change Summary

Latest commit: 0758e87 - Bump actions/upload-artifact from 4 to 5
Build started: 2025-10-27 06:53:13 UTC


📊 Overall Progress

Branch: dependabot/github_actions/actions/upload-artifact-5
Status: 🔵 Building in progress
Preview URL (after completion): https://litlfred.github.io/sgex/dependabot-github_actions-actions-upload-artifact-5/


💡 Build started for commit 0758e87. Will update when complete.

@github-actions
Copy link
Contributor

github-actions bot commented Oct 27, 2025

🚀 Deployment Status: Successfully Deployed 🟢

📊 Deployment Information

Workflow: Deploy Feature Branch (🔀 Pull Request)
Action ID: 18832418140
Commit: 87e858a (view changes)
Workflow Step: Successfully Deployed

🌐 Preview URLs

Open Branch Preview

🔗 Quick Actions

Build Logs

📦 Build Artifacts Status

Artifact Status Description Type
workflow-event-log 🟢 Available GitHub event metadata with links .log
build-logs 🟢 Available Complete timestamped build output .txt
webpack-stats 🟢 Available Webpack compilation statistics .json
bundle-report 🟢 Available Bundle size analysis and recommendations .txt
build-step-log 🟢 Available Build step console output .log
bundle-analysis-step-log 🟢 Available Bundle analysis console output .log

🟢 All artifacts available! Click artifact names above or visit workflow artifacts section.

How to download:

  1. Click any artifact name in the table above
  2. Or visit the workflow run page and scroll to "Artifacts"
  3. Each artifact contains a single log file (no zip extraction needed)

📊 Overall Progress

Branch: dependabot/github_actions/actions/upload-artifact-5
Status: 🟢 Live and accessible
Status: Deployment complete - site is ready for testing


📋 Deployment Timeline


💡 This comment is automatically updated as the deployment progresses.

@github-actions github-actions bot requested a deployment to branch-preview-dependabot-github-actions-actions-upload-artifact-5 October 27, 2025 06:53 In progress
@github-actions
Copy link
Contributor

github-actions bot commented Oct 27, 2025

🔒 Security Check Report

Security Status

🟢 5 passed • 🟡 2 warnings

Security Checks

CheckStatusDetails
NPM Audit🟢No vulnerabilities found
Outdated Dependencies🟡8 outdated packages (1 major versions behind)
ESLint Security🟢No security-related linting issues
Security Headers🟡Some security headers missing in source
License Compliance🟢No problematic licenses detected
Secret Scanning🟢No potential secrets detected in code
Framework Compliance🟢Framework compliance checks passed

🔍 Action Items

⚠️ Outdated Dependencies - 8 outdated packages (1 major versions behind)

Details:
Major version updates needed for:

  • react-syntax-highlighter

Recommendation: Review outdated packages and update where possible

⚠️ Security Headers - Some security headers missing in source

Details:

Recommendation: Ensure all security headers are properly defined


⚠️ Security Status: WARNINGS

Some security warnings were detected. Please review the action items above.

Last checked: Mon, 27 Oct 2025 06:53:22 GMT


This security check is automatically run on every PR build. Learn more about our security checks

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Dec 15, 2025

Superseded by #1188.

@dependabot dependabot bot closed this Dec 15, 2025
@dependabot dependabot bot deleted the dependabot/github_actions/actions/upload-artifact-5 branch December 15, 2025 06:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants