112.json (9482B)
1 { 2 "number": 112, 3 "title": "Bump actions/upload-artifact from 3 to 4", 4 "state": "merged", 5 "diff_file": "112.diff", 6 "author": "dependabot[bot]", 7 "created_at": "2024-12-29T14:13:20Z", 8 "closed_at": "2024-12-29T14:15:33Z", 9 "merged_at": "2024-12-29T14:15:33Z", 10 "base_ref": "main", 11 "head_ref": "dependabot/github_actions/actions/upload-artifact-4", 12 "labels": [ 13 "dependencies", 14 "github_actions" 15 ], 16 "assignees": [], 17 "requested_reviewers": [], 18 "body": "Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 3 to 4.\n<details>\n<summary>Release notes</summary>\n<p><em>Sourced from <a href=\"https://github.com/actions/upload-artifact/releases\">actions/upload-artifact's releases</a>.</em></p>\n<blockquote>\n<h2>v4.0.0</h2>\n<h2>What's Changed</h2>\n<p>The release of upload-artifact@v4 and download-artifact@v4 are major changes to the backend architecture of Artifacts. They have numerous performance and behavioral improvements.</p>\n<p>\u2139\ufe0f However, this is a major update that includes breaking changes. Artifacts created with versions v3 and below are not compatible with the v4 actions. Uploads and downloads <em>must</em> use the same major actions versions. There are also key differences from previous versions that may require updates to your workflows.</p>\n<p>For more information, please see:</p>\n<ol>\n<li>The <a href=\"https://github.blog/changelog/2023-12-14-github-actions-artifacts-v4-is-now-generally-available/\">changelog</a> post.</li>\n<li>The <a href=\"https://github.com/actions/upload-artifact/blob/main/README.md\">README</a>.</li>\n<li>The <a href=\"https://github.com/actions/upload-artifact/blob/main/docs/MIGRATION.md\">migration documentation</a>.</li>\n<li>As well as the underlying npm package, <a href=\"https://github.com/actions/toolkit/tree/main/packages/artifact\"><code>@\u200bactions/artifact</code></a> documentation.</li>\n</ol>\n<h2>New Contributors</h2>\n<ul>\n<li><a href=\"https://github.com/vmjoseph\"><code>@\u200bvmjoseph</code></a> made their first contribution in <a href=\"https://redirect.github.com/actions/upload-artifact/pull/464\">actions/upload-artifact#464</a></li>\n</ul>\n<p><strong>Full Changelog</strong>: <a href=\"https://github.com/actions/upload-artifact/compare/v3...v4.0.0\">https://github.com/actions/upload-artifact/compare/v3...v4.0.0</a></p>\n<h2>v3.2.1</h2>\n<h2>What's Changed</h2>\n<p>This fixes the <code>include-hidden-files</code> input introduced in <a href=\"https://github.com/actions/upload-artifact/releases/tag/v3.2.0\">https://github.com/actions/upload-artifact/releases/tag/v3.2.0</a></p>\n<ul>\n<li>Ensure hidden files input is used by <a href=\"https://github.com/joshmgross\"><code>@\u200bjoshmgross</code></a> in <a href=\"https://redirect.github.com/actions/upload-artifact/pull/609\">actions/upload-artifact#609</a></li>\n</ul>\n<p><strong>Full Changelog</strong>: <a href=\"https://github.com/actions/upload-artifact/compare/v3.2.0...v3.2.1\">https://github.com/actions/upload-artifact/compare/v3.2.0...v3.2.1</a></p>\n<h2>v3.2.1-node20</h2>\n<h2>What's Changed</h2>\n<p>This fixes the <code>include-hidden-files</code> input introduced in <a href=\"https://github.com/actions/upload-artifact/releases/tag/v3.2.0-node20\">https://github.com/actions/upload-artifact/releases/tag/v3.2.0-node20</a></p>\n<ul>\n<li>Ensure hidden files input is used by <a href=\"https://github.com/joshmgross\"><code>@\u200bjoshmgross</code></a> in <a href=\"https://redirect.github.com/actions/upload-artifact/pull/608\">actions/upload-artifact#608</a></li>\n</ul>\n<p><strong>Full Changelog</strong>: <a href=\"https://github.com/actions/upload-artifact/compare/v3.2.0-node20...v3.2.1-node20\">https://github.com/actions/upload-artifact/compare/v3.2.0-node20...v3.2.1-node20</a></p>\n<h2>v3.2.0</h2>\n<h2>Notice: Breaking Changes :warning:</h2>\n<p>We will no longer include hidden files and folders by default in the <code>upload-artifact</code> action of this version. This reduces the risk that credentials are accidentally uploaded into artifacts. Customers who need to continue to upload these files can use a new option, <code>include-hidden-files</code>, to continue to do so.</p>\n<p>See <a href=\"https://github.blog/changelog/2024-08-19-notice-of-upcoming-deprecations-and-breaking-changes-in-github-actions-runners/\">"Notice of upcoming deprecations and breaking changes in GitHub Actions runners"</a> changelog and <a href=\"https://redirect.github.com/actions/upload-artifact/issues/602\">this issue</a> for more details.</p>\n<h2>What's Changed</h2>\n<ul>\n<li>V3 backport: Exclude hidden files by default by <a href=\"https://github.com/SrRyan\"><code>@\u200bSrRyan</code></a> in <a href=\"https://redirect.github.com/actions/upload-artifact/pull/604\">actions/upload-artifact#604</a></li>\n</ul>\n<!-- raw HTML omitted -->\n</blockquote>\n<p>... (truncated)</p>\n</details>\n<details>\n<summary>Commits</summary>\n<ul>\n<li><a href=\"https://github.com/actions/upload-artifact/commit/6f51ac03b9356f520e9adb1b1b7802705f340c2b\"><code>6f51ac0</code></a> Merge pull request <a href=\"https://redirect.github.com/actions/upload-artifact/issues/656\">#656</a> from bdehamer/bdehamer/artifact-digest</li>\n<li><a href=\"https://github.com/actions/upload-artifact/commit/c40c16d999899d3642ba1597014ba7ef8ff611e7\"><code>c40c16d</code></a> add new artifact-digest output</li>\n<li><a href=\"https://github.com/actions/upload-artifact/commit/735efb4a0a50bb1a533b000483f2d0a23effbd26\"><code>735efb4</code></a> bump <code>@\u200bactions/artifact</code> from 2.1.11 to 2.2.0</li>\n<li><a href=\"https://github.com/actions/upload-artifact/commit/184d73b71b93c222403b2e7f1ffebe4508014249\"><code>184d73b</code></a> Merge pull request <a href=\"https://redirect.github.com/actions/upload-artifact/issues/578\">#578</a> from hamirmahal/fix/deprecated-nodejs-usage-in-action</li>\n<li><a href=\"https://github.com/actions/upload-artifact/commit/b4a0a984a056f94abb1db07895e844b9422e1e41\"><code>b4a0a98</code></a> Merge branch 'main' into fix/deprecated-nodejs-usage-in-action</li>\n<li><a href=\"https://github.com/actions/upload-artifact/commit/b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882\"><code>b4b15b8</code></a> Merge pull request <a href=\"https://redirect.github.com/actions/upload-artifact/issues/632\">#632</a> from actions/joshmgross/undo-dependency-changes</li>\n<li><a href=\"https://github.com/actions/upload-artifact/commit/92b01ebffaf2e2520c64ab2845d3f9bd5c06941a\"><code>92b01eb</code></a> Undo indirect dependency updates from <a href=\"https://redirect.github.com/actions/upload-artifact/issues/627\">#627</a></li>\n<li><a href=\"https://github.com/actions/upload-artifact/commit/84480863f228bb9747b473957fcc9e309aa96097\"><code>8448086</code></a> Merge pull request <a href=\"https://redirect.github.com/actions/upload-artifact/issues/627\">#627</a> from actions/robherley/v4.4.2</li>\n<li><a href=\"https://github.com/actions/upload-artifact/commit/b1d4642b699cfe7e338a864cc36849b29ad04a75\"><code>b1d4642</code></a> add explicit relative and absolute symlinks to workflow</li>\n<li><a href=\"https://github.com/actions/upload-artifact/commit/d50e66084c4d29dc5d3326b7a0e67bed9ef4bb1e\"><code>d50e660</code></a> bump version</li>\n<li>Additional commits viewable in <a href=\"https://github.com/actions/upload-artifact/compare/v3...v4\">compare view</a></li>\n</ul>\n</details>\n<br />\n\n\n[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n<details>\n<summary>Dependabot commands and options</summary>\n<br />\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n</details>", 19 "comments": [], 20 "review_comments": [] 21 }