build(deps): update github actions (main) (major)
Metadata
Current evaluation
Renovate PR #497 merged via commit 01a6030, bumping actions/download-artifact v7 to v8 and actions/upload-artifact v6 to v7 in CI workflows. Approved by 2 reviewers with all CI checks passing.
Resolution: closed resolved
Reason: The PR itself was merged into main as commit 01a6030 ('build(deps): update github actions (#497)'). A pickaxe search for 'download-artifact@v8' and 'upload-artifact@v7' confirms this commit introduced both version pins, and all 13 CI checks passed before merge.
Evaluated by: mr-cal-bot
No scores available.
Issue body
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [actions/download-artifact](https://redirect.github.com/actions/download-artifact) | action | major | `v7` → `v8` |
| [actions/upload-artifact](https://redirect.github.com/actions/upload-artifact) | action | major | `v6` → `v7` |
---
### Release Notes
<details>
<summary>actions/download-artifact (actions/download-artifact)</summary>
### [`v8`](https://redirect.github.com/actions/download-artifact/compare/v7...v8)
[Compare Source](https://redirect.github.com/actions/download-artifact/compare/v7...v8)
</details>
<details>
<summary>actions/upload-artifact (actions/upload-artifact)</summary>
### [`v7`](https://redirect.github.com/actions/upload-artifact/compare/v6...v7)
[Compare Source](https://redirect.github.com/actions/upload-artifact/compare/v6...v7)
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "every weekend" in timezone Etc/UTC, Automerge - At any time (no schedule defined).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/canonical/starbase).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My40My4yIiwidXBkYXRlZEluVmVyIjoiNDMuNTYuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiUFI6IERlcGVuZGVuY2llcyJdfQ==-->
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed resolved | Renovate PR #497 merged via commit 01a6030, bumping actions/download-artifact v7 to v8 and actions/upload-artifact v6 to v7 in CI workflows. Approved by 2 reviewers with all CI checks passing. | |
| stealth/space-bunny-alpha | — | closed resolved | Merged PR #497 in commit 01a6030, upgrading actions/download-artifact v7 to v8 and actions/upload-artifact v6 to v7; all CI checks passed. | |
| qwen/qwen3.6-35b-a3b | — | — | Merged automated dependency update generated by Renovate. Updated GitHub Actions actions/download-artifact to v8 and actions/upload-artifact to v7. All CI checks passed and the PR was auto-merged. | |
| qwen3.6-35b-a3b-mtp-q6 | — | — | Merged automated dependency updates for GitHub Actions. actions/download-artifact advanced to v8 and actions/upload-artifact to v7. The changes were automatically merged into main by Renovate bot. |
Update history
No update history recorded yet.
Related work
-
Related To:
canonical/starbase#585
(confidence 55%)
Later commit f86068e ('fix(ci): resolve all zizmor findings in GitHub workflows (#585)') also touches these artifact action pins, indicating follow-up workflow hardening on top of the same lines.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #91 build(deps): update github actions (main) (major) | debcraft | merged | Renovate PR #91 merged into main, upgrading actions/download-artifact v7→v8 and actions/upload-artifact v6→v7. | |
| #198 build(deps): update github actions (main) (major) | craft-platforms | merged | Renovate PR merged (commit 3211ae8): bumped actions/download-artifact v6→v7, actions/upload-artifact v5→v6 and astral-sh/setup-uv v6→v7 across CI workflows; all checks passed with 2 approvals. | |
| #69 build(deps): update github actions (main) (major) | craft-artifacts | merged | Renovate PR bumping actions/upload-artifact v6→v7 and actions/download-artifact v7→v8 in .github/workflows/release-publish.yaml was approved and merged via commit 89d025e; all test/lint checks passed (only typecheck-with-ty failed). | |
| #1057 build(deps): update github actions (main) (major) | craft-application | merged | Merged Renovate PR #1057 in commit 33607e21, updating actions/download-artifact v6→v8 and actions/upload-artifact v5→v7. | |
| #479 build(deps): update github actions (main) (major) | starbase | merged | Merged PR #479 upgraded actions/download-artifact v6→v7 and actions/upload-artifact v5→v6 in commit 6910a9b. | |
| #67 build(deps): update github actions (main) (major) | debcraft | merged | Renovate PR canonical/debcraft#67 merged as 953d791, upgrading actions/download-artifact v6→v7 and actions/upload-artifact v5→v6 after all CI checks passed. | |
| #58 build(deps): update github actions (main) (major) | craft-artifacts | merged | Merged Renovate PR #58 into main, updating actions/download-artifact v6→v7 and actions/upload-artifact v5→v6 in commit 464bf02. | |
| #218 build(deps): update github actions (main) (major) | craft-platforms | merged | Renovate PR #218 merged in commit ebf4332, updating actions/upload-artifact v6→v7 and softprops/action-gh-release v2→v3. | |
| #161 build(deps): update github actions (main) (major) | craft-grammar | merged | Merged into main as df24140, upgrading actions/download-artifact from v6 to v7 and actions/upload-artifact from v5 to v6; all reported CI checks passed. | |
| #212 build(deps): update github actions (main) (major) | craft-platforms | merged | Merged #212, upgrading actions/download-artifact from v7 to v8 and release-drafter from v6.2.0 to v7.1.1 after all CI checks passed. |