[dependabot]

Bumps actions/upload-artifact from 4.6.2 to 7.0.2.

Release notes

Sourced from actions/upload-artifact's releases.

v7.0.2

What's Changed

• Improves artifact download retries when the service returns HTTP 429 (rate limiting), including honoring valid Retry-After headers.
• Updates @​actions/artifact to v6.3.1.

New Contributors

• @​tunc-d made their first contribution in actions/upload-artifact#821

Full Changelog: actions/upload-artifact@v7.0.1...v7.0.2

v7.0.1

What's Changed

• Update the readme with direct upload details by @​danwkennedy in actions/upload-artifact#795
• Readme: bump all the example versions to v7 by @​danwkennedy in actions/upload-artifact#796
• Include changes in typespec/ts-http-runtime 0.3.5 by @​yacaovsnc in actions/upload-artifact#797

Full Changelog: actions/upload-artifact@v7...v7.0.1

v7.0.0

v7 What's new

Direct Uploads

Adds support for uploading single files directly (unzipped). Callers can set the new archive parameter to false to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The name parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.

ESM

To support new versions of the @actions/* packages, we've upgraded the package to ESM.

What's Changed

• Add proxy integration test by @​Link- in actions/upload-artifact#754
• Upgrade the module to ESM and bump dependencies by @​danwkennedy in actions/upload-artifact#762
• Support direct file uploads by @​danwkennedy in actions/upload-artifact#764

New Contributors

• @​Link- made their first contribution in actions/upload-artifact#754

Full Changelog: actions/upload-artifact@v6...v7.0.0

v6.0.0

v6 - What's new

[!IMPORTANT] actions/upload-artifact@v6 now runs on Node.js 24 (runs.using: node24) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.

Node.js 24

This release updates the runtime to Node.js 24. v5 had preliminary support for Node.js 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.

... (truncated)

Commits

• cf430e0 Merge pull request #822 from actions/tunc-d-prepare-upload-v7-0-2
• c2acded chore: prepare v7.0.2 release
• 4687c1b Merge pull request #821 from actions/tunc-d-upload-artifact-package-bump
• 8cbe1be Bump @​actions/artifact to 6.3.1
• 043fb46 Merge pull request #797 from actions/yacaovsnc/update-dependency
• 634250c Include changes in typespec/ts-http-runtime 0.3.5
• e454baa Readme: bump all the example versions to v7 (#796)
• 74fad66 Update the readme with direct upload details (#795)
• bbbca2d Support direct file uploads (#764)
• 589182c Upgrade the module to ESM and bump dependencies (#762)
• Additional commits viewable in compare view

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: Organization UI
• Review profile: CHILL
• Plan: Advanced
• Run ID: 27f6b968-3414-48d8-8ad5-a3ea38c344ca

---

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

---

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

FactoryLine Proof Review

Commit: d4d8517298792ed0c8b8258ab1c2cc45b12d891d
Diff-to-Proof Review SHA-256: 0d634eb9711e50e7157103481bffd00aca182c751084b54b105c69da04e4801b
Proof Review SHA-256: 368c30f020b00fed372b38d7c4c48376f8206826313028307da1b9585aeda110

Changed-scope walkthrough

• Delivery — .github/workflows/audit-benchmark.yml, .github/workflows/ci.yml, .github/workflows/codeql.yml, .github/workflows/factory-pr-proof-review.yml, .github/workflows/factory-proof.yml, .github/workflows/intellij-plugin.yml, .github/workflows/jetbrains-marketplace.yml, .github/workflows/mutation-audit.yml, .github/workflows/opencode-plugin.yml, .github/workflows/openvsx.yml, .github/workflows/publish.yml, .github/workflows/signed-receipts.yml, .github/workflows/vscode-extension.yml, .github/workflows/vscode-marketplace.yml, .github/workflows/worker-verification.yml

Fact-derived next action

• bind_changed_path_to_proof — This changed path has no explicit Graph Ops proof-input edge.

Findings

• blocking unmatched_changed_path — This changed path has no explicit Graph Ops proof-input edge.

Unproven claims

• No explicit proof-input edge is declared for .github/workflows/audit-benchmark.yml.
• No explicit proof-input edge is declared for .github/workflows/ci.yml.
• No explicit proof-input edge is declared for .github/workflows/codeql.yml.
• No explicit proof-input edge is declared for .github/workflows/factory-pr-proof-review.yml.
• No explicit proof-input edge is declared for .github/workflows/factory-proof.yml.
• No explicit proof-input edge is declared for .github/workflows/intellij-plugin.yml.
• No explicit proof-input edge is declared for .github/workflows/jetbrains-marketplace.yml.
• No explicit proof-input edge is declared for .github/workflows/mutation-audit.yml.
• No explicit proof-input edge is declared for .github/workflows/opencode-plugin.yml.
• No explicit proof-input edge is declared for .github/workflows/openvsx.yml.
• No explicit proof-input edge is declared for .github/workflows/publish.yml.
• No explicit proof-input edge is declared for .github/workflows/signed-receipts.yml.
• No explicit proof-input edge is declared for .github/workflows/vscode-extension.yml.
• No explicit proof-input edge is declared for .github/workflows/vscode-marketplace.yml.
• No explicit proof-input edge is declared for .github/workflows/worker-verification.yml.
• Pattern and guard-path audit state: no_structural_findings; no runtime correctness or release approval is implied.

Authority boundary

Advisory only. This payload has no execution, approval, publication, deployment, signing, messaging, credential, connector, source write, test execution, repair authority. It does not use CodeRabbit credentials, interpret AI comments as proof, approve, merge, or modify source.

Existing Diff-to-Proof map

flowchart LR
  REVIEW["Diff-to-Proof Review"]
  C1["Changed: .github/workflows/audit-benchmark.yml"]
  C1 --> REVIEW
  C2["Changed: .github/workflows/ci.yml"]
  C2 --> REVIEW
  C3["Changed: .github/workflows/codeql.yml"]
  C3 --> REVIEW
  C4["Changed: .github/workflows/factory-pr-proof-review.yml"]
  C4 --> REVIEW
  C5["Changed: .github/workflows/factory-proof.yml"]
  C5 --> REVIEW
  C6["Changed: .github/workflows/intellij-plugin.yml"]
  C6 --> REVIEW
  C7["Changed: .github/workflows/jetbrains-marketplace.yml"]
  C7 --> REVIEW
  C8["Changed: .github/workflows/mutation-audit.yml"]
  C8 --> REVIEW
  C9["Changed: .github/workflows/opencode-plugin.yml"]
  C9 --> REVIEW
  C10["Changed: .github/workflows/openvsx.yml"]
  C10 --> REVIEW
  C11["Changed: .github/workflows/publish.yml"]
  C11 --> REVIEW
  C12["Changed: .github/workflows/signed-receipts.yml"]
  C12 --> REVIEW
  C13["Changed: .github/workflows/vscode-extension.yml"]
  C13 --> REVIEW
  C14["Changed: .github/workflows/vscode-marketplace.yml"]
  C14 --> REVIEW
  C15["Changed: .github/workflows/worker-verification.yml"]
  C15 --> REVIEW
  U1["Unmatched: .github/workflows/audit-benchmark.yml"]
  REVIEW --> U1
  U2["Unmatched: .github/workflows/ci.yml"]
  REVIEW --> U2
  U3["Unmatched: .github/workflows/codeql.yml"]
  REVIEW --> U3
  U4["Unmatched: .github/workflows/factory-pr-proof-review.yml"]
  REVIEW --> U4
  U5["Unmatched: .github/workflows/factory-proof.yml"]
  REVIEW --> U5
  U6["Unmatched: .github/workflows/intellij-plugin.yml"]
  REVIEW --> U6
  U7["Unmatched: .github/workflows/jetbrains-marketplace.yml"]
  REVIEW --> U7
  U8["Unmatched: .github/workflows/mutation-audit.yml"]
  REVIEW --> U8
  U9["Unmatched: .github/workflows/opencode-plugin.yml"]
  REVIEW --> U9
  U10["Unmatched: .github/workflows/openvsx.yml"]
  REVIEW --> U10
  U11["Unmatched: .github/workflows/publish.yml"]
  REVIEW --> U11
  U12["Unmatched: .github/workflows/signed-receipts.yml"]
  REVIEW --> U12
  U13["Unmatched: .github/workflows/vscode-extension.yml"]
  REVIEW --> U13
  U14["Unmatched: .github/workflows/vscode-marketplace.yml"]
  REVIEW --> U14
  U15["Unmatched: .github/workflows/worker-verification.yml"]
  REVIEW --> U15
  F1["unmatched_changed_path"]
  REVIEW --> F1

Loading

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.