Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 27, 2025

Bumps actions/upload-artifact from 4 to 5.

Release notes

Sourced from actions/upload-artifact's releases.

v5.0.0

What's Changed

BREAKING CHANGE: this update supports Node v24.x. This is not a breaking change per-se but we're treating it as such.

New Contributors

Full Changelog: actions/upload-artifact@v4...v5.0.0

v4.6.2

What's Changed

New Contributors

Full Changelog: actions/upload-artifact@v4...v4.6.2

v4.6.1

What's Changed

Full Changelog: actions/upload-artifact@v4...v4.6.1

v4.6.0

What's Changed

Full Changelog: actions/upload-artifact@v4...v4.6.0

v4.5.0

What's Changed

New Contributors

... (truncated)

Commits
  • 330a01c Merge pull request #734 from actions/danwkennedy/prepare-5.0.0
  • 03f2824 Update github.dep.yml
  • 905a1ec Prepare v5.0.0
  • 2d9f9cd Merge pull request #725 from patrikpolyak/patch-1
  • 9687587 Merge branch 'main' into patch-1
  • 2848b2c Merge pull request #727 from danwkennedy/patch-1
  • 9b51177 Spell out the first use of GHES
  • cd231ca Update GHES guidance to include reference to Node 20 version
  • de65e23 Merge pull request #712 from actions/nebuk89-patch-1
  • 8747d8c Update README.md
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Oct 27, 2025
@github-actions
Copy link

github-actions bot commented Oct 27, 2025

Test Results

  73 files  ±0    73 suites  ±0   3m 41s ⏱️ -4s
618 tests ±0  603 ✔️ ±0  15 💤 ±0  0 ±0 
630 runs  ±0  615 ✔️ ±0  15 💤 ±0  0 ±0 

Results for commit 07426a5. ± Comparison against base commit 687ee36.

This pull request removes 3 and adds 3 tests. Note that renamed tests count towards both.
nu.yona.server.util.TimeUtilTest ‑ [1] a=2025-10-30T20:54:51.409078378Z, b=2025-10-30T20:54:50.409078378Z, expected=2025-10-30T20:54:51.409078378Z
nu.yona.server.util.TimeUtilTest ‑ [2] a=2025-10-30T20:54:51.409078378Z, b=2025-10-30T20:54:52.409078378Z, expected=2025-10-30T20:54:52.409078378Z
nu.yona.server.util.TimeUtilTest ‑ [3] a=2025-10-30T20:54:51.409078378Z, b=2025-10-30T20:54:51.409078378Z, expected=2025-10-30T20:54:51.409078378Z
nu.yona.server.util.TimeUtilTest ‑ [1] a=2025-10-30T20:58:06.959773265Z, b=2025-10-30T20:58:05.959773265Z, expected=2025-10-30T20:58:06.959773265Z
nu.yona.server.util.TimeUtilTest ‑ [2] a=2025-10-30T20:58:06.959773265Z, b=2025-10-30T20:58:07.959773265Z, expected=2025-10-30T20:58:07.959773265Z
nu.yona.server.util.TimeUtilTest ‑ [3] a=2025-10-30T20:58:06.959773265Z, b=2025-10-30T20:58:06.959773265Z, expected=2025-10-30T20:58:06.959773265Z

♻️ This comment has been updated with latest results.

@Bert-R
Copy link
Collaborator

Bert-R commented Oct 30, 2025

@dependabot rebase

Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4 to 5.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@v4...v5)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/github_actions/actions/upload-artifact-5 branch from f689fc3 to 07426a5 Compare October 30, 2025 20:54
@sonarqubecloud
Copy link

@github-actions
Copy link

Dependency Review

The following issues were found:

  • ❌ 9 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ⚠️ 479 package(s) with unknown licenses.
  • ⚠️ 6 packages with OpenSSF Scorecard issues.

View full job summary

@Bert-R Bert-R merged commit 38ce8ec into master Oct 31, 2025
6 of 7 checks passed
@dependabot dependabot bot deleted the dependabot/github_actions/actions/upload-artifact-5 branch October 31, 2025 05:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants