chore(deps): update actions/upload-artifact action to v5 (v2) by squiggler-app[bot] · Pull Request #2263 · sanity-io/ui

squiggler-app · 2026-07-06T10:02:50Z

This PR contains the following updates:

Package	Type	Update	Change
actions/upload-artifact	action	major	`v4` → `v5`

Release Notes

actions/upload-artifact (actions/upload-artifact)

`v5.0.0`

Compare Source

What's Changed

BREAKING CHANGE: this update supports Node v24.x. This is not a breaking change per-se but we're treating it as such.

Update README.md by @GhadimiR in #681
Update README.md by @nebuk89 in #712
Readme: spell out the first use of GHES by @danwkennedy in #727
Update GHES guidance to include reference to Node 20 version by @patrikpolyak in #725
Bump @actions/artifact to v4.0.0
Prepare v5.0.0 by @danwkennedy in #734

New Contributors

@GhadimiR made their first contribution in #681
@nebuk89 made their first contribution in #712
@danwkennedy made their first contribution in #727
@patrikpolyak made their first contribution in #725

Full Changelog: actions/upload-artifact@v4...v5.0.0

`v5`

Compare Source

`v4.6.2`

Compare Source

What's Changed

Update to use artifact 2.3.2 package & prepare for new upload-artifact release by @salmanmkc in #685

New Contributors

@salmanmkc made their first contribution in #685

Full Changelog: actions/upload-artifact@v4...v4.6.2

`v4.6.1`

Compare Source

What's Changed

Update to use artifact 2.2.2 package by @yacaovsnc in #673

Full Changelog: actions/upload-artifact@v4...v4.6.1

`v4.6.0`

Compare Source

What's Changed

Expose env vars to control concurrency and timeout by @yacaovsnc in #662

Full Changelog: actions/upload-artifact@v4...v4.6.0

`v4.5.0`

Compare Source

What's Changed

fix: deprecated Node.js version in action by @hamirmahal in #578
Add new artifact-digest output by @bdehamer in #656

New Contributors

@hamirmahal made their first contribution in #578
@bdehamer made their first contribution in #656

Full Changelog: actions/upload-artifact@v4.4.3...v4.5.0

`v4.4.3`

Compare Source

What's Changed

Undo indirect dependency updates from #627 by @joshmgross in #632

Full Changelog: actions/upload-artifact@v4.4.2...v4.4.3

`v4.4.2`

Compare Source

What's Changed

Bump @actions/artifact to 2.1.11 by @robherley in #627
- Includes fix for relative symlinks not resolving properly

Full Changelog: actions/upload-artifact@v4.4.1...v4.4.2

`v4.4.1`

Compare Source

What's Changed

Add a section about hidden files by @joshmgross in #607
Add workflow file for publishing releases to immutable action package by @Jcambass in #621
Update @actions/artifact to latest version, includes symlink and timeout fixes by @robherley in #625

New Contributors

@Jcambass made their first contribution in #621

Full Changelog: actions/upload-artifact@v4.4.0...v4.4.1

`v4.4.0`

Compare Source

Notice: Breaking Changes ⚠️

We will no longer include hidden files and folders by default in the upload-artifact action of this version. This reduces the risk that credentials are accidentally uploaded into artifacts. Customers who need to continue to upload these files can use a new option, include-hidden-files, to continue to do so.

See "Notice of upcoming deprecations and breaking changes in GitHub Actions runners" changelog and this issue for more details.

What's Changed

Exclude hidden files by default by @joshmgross in #598

Full Changelog: actions/upload-artifact@v4.3.6...v4.4.0

What's Changed

Bump @actions/artifact to v2.1.9 by @robherley in #588
- Fixed artifact upload chunk timeout logic #1774
- Use lazy stream to prevent issues with open file limits #1771

Full Changelog: actions/upload-artifact@v4.3.4...v4.3.5

`v4.3.4`

Compare Source

What's Changed

Update @actions/artifact version, bump dependencies by @robherley in #584

Full Changelog: actions/upload-artifact@v4.3.3...v4.3.4

`v4.3.3`

Compare Source

What's Changed

updating @actions/artifact dependency to v2.1.6 by @eggyhead in #565

Full Changelog: actions/upload-artifact@v4.3.2...v4.3.3

`v4.3.2`

Compare Source

What's Changed

Update release-new-action-version.yml by @konradpabjan in #516
Minor fix to the migration readme by @andrewakim in #523
Update readme with v3/v2/v1 deprecation notice by @robherley in #561
updating @actions/artifact dependency to v2.1.5 and @actions/core to v1.0.1 by @eggyhead in #562

New Contributors

@andrewakim made their first contribution in #523

Full Changelog: actions/upload-artifact@v4.3.1...v4.3.2

`v4.3.1`

Compare Source

Bump @actions/artifacts to latest version to include updated GHES host check

`v4.3.0`

Compare Source

What's Changed

Reorganize upload code in prep for merge logic & add more tests by @robherley in #504
Add sub-action to merge artifacts by @robherley in #505

Full Changelog: actions/upload-artifact@v4...v4.3.0

`v4.2.0`

Compare Source

What's Changed

Ability to overwrite an Artifact by @robherley in #501

Full Changelog: actions/upload-artifact@v4...v4.2.0

`v4.1.0`

Compare Source

What's Changed

Add migrations docs by @robherley in #482
Update README.md by @samuelwine in #492
Support artifact-url output by @konradpabjan in #496
Update readme to reflect new 500 artifact per job limit by @robherley in #497

New Contributors

@samuelwine made their first contribution in #492

Full Changelog: actions/upload-artifact@v4...v4.1.0

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate using a curated preset maintained by . View repository job log here

vercel · 2026-07-06T10:02:53Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
sanity-ui-storybook	Error		Jul 6, 2026 10:02am

1 Skipped Deployment

Project	Deployment	Actions	Updated (UTC)
sanity-ui-workshop	Ignored		Jul 6, 2026 10:02am

changeset-bot · 2026-07-06T10:02:55Z

⚠️ No Changeset found

Latest commit: e1e5983

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

socket-security · 2026-07-06T10:03:14Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	github/actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 ⏵ 330a01c490aca151604b8cf639adc76d48f6c5d4

View full report

socket-security · 2026-07-06T10:03:16Z

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert (click "▶" to expand/collapse)
Warn		Obfuscated code: github `actions/upload-artifact` is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: .github/workflows/main.yml → `github/actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore github/actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

squiggler-app · 2026-07-06T11:37:18Z

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update. You will not get PRs for any future 5.x releases. But if you manually upgrade to 5.x then Renovate will re-enable minor and patch updates automatically.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.

chore(deps): update actions/upload-artifact action to v5

e1e5983

squiggler-app Bot added ⚠️ major 📦 deps 🤖 bot labels Jul 6, 2026

vercel Bot had a problem deploying to Preview – sanity-ui-storybook July 6, 2026 10:02 Failure

stipsan closed this Jul 6, 2026

squiggler-app Bot deleted the renovate/v2-major-5-github-artifact-actions branch July 6, 2026 11:37

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): update actions/upload-artifact action to v5 (v2)#2263

chore(deps): update actions/upload-artifact action to v5 (v2)#2263
squiggler-app[bot] wants to merge 1 commit into
v2from
renovate/v2-major-5-github-artifact-actions

squiggler-app Bot commented Jul 6, 2026

Uh oh!

vercel Bot commented Jul 6, 2026 •

edited

Loading

Uh oh!

changeset-bot Bot commented Jul 6, 2026

Uh oh!

socket-security Bot commented Jul 6, 2026

Uh oh!

socket-security Bot commented Jul 6, 2026

Uh oh!

squiggler-app Bot commented Jul 6, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

squiggler-app Bot commented Jul 6, 2026

Release Notes

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

New Contributors

Notice: Breaking Changes ⚠️

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

New Contributors

Configuration

Uh oh!

vercel Bot commented Jul 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

changeset-bot Bot commented Jul 6, 2026

⚠️ No Changeset found

Uh oh!

socket-security Bot commented Jul 6, 2026

Uh oh!

socket-security Bot commented Jul 6, 2026

Uh oh!

squiggler-app Bot commented Jul 6, 2026

Renovate Ignore Notification

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

vercel Bot commented Jul 6, 2026 •

edited

Loading