Skip to content

build(deps): bump actions/upload-artifact from 4 to 7#8

Closed
dependabot[bot] wants to merge 29 commits intomasterfrom
dependabot/github_actions/actions/upload-artifact-7
Closed

build(deps): bump actions/upload-artifact from 4 to 7#8
dependabot[bot] wants to merge 29 commits intomasterfrom
dependabot/github_actions/actions/upload-artifact-7

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 3, 2026

Bumps actions/upload-artifact from 4 to 7.

Release notes

Sourced from actions/upload-artifact's releases.

v7.0.0

v7 What's new

Direct Uploads

Adds support for uploading single files directly (unzipped). Callers can set the new archive parameter to false to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The name parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.

ESM

To support new versions of the @actions/* packages, we've upgraded the package to ESM.

What's Changed

New Contributors

Full Changelog: actions/upload-artifact@v6...v7.0.0

v6.0.0

v6 - What's new

[!IMPORTANT] actions/upload-artifact@v6 now runs on Node.js 24 (runs.using: node24) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.

Node.js 24

This release updates the runtime to Node.js 24. v5 had preliminary support for Node.js 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.

What's Changed

Full Changelog: actions/upload-artifact@v5.0.0...v6.0.0

v5.0.0

What's Changed

BREAKING CHANGE: this update supports Node v24.x. This is not a breaking change per-se but we're treating it as such.

... (truncated)

Commits
  • bbbca2d Support direct file uploads (#764)
  • 589182c Upgrade the module to ESM and bump dependencies (#762)
  • 47309c9 Merge pull request #754 from actions/Link-/add-proxy-integration-tests
  • 02a8460 Add proxy integration test
  • b7c566a Merge pull request #745 from actions/upload-artifact-v6-release
  • e516bc8 docs: correct description of Node.js 24 support in README
  • ddc45ed docs: update README to correct action name for Node.js 24 support
  • 615b319 chore: release v6.0.0 for Node.js 24 support
  • 017748b Merge pull request #744 from actions/fix-storage-blob
  • 38d4c79 chore: rebuild dist
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

srpatcha and others added 29 commits April 1, 2026 00:40
- Fix SEGFAULT in eni_decoder_tests on Windows (MSVC C4700)
  Zero-initialize eni_decode_result_t and eni_eeg_packet_t variables
  to prevent MSVC optimizer UB with uninitialized locals in Release mode

- Fix 'eosim simulate' command not found in EoSim Sanity and Simulation Test workflows
  Replace 'eosim simulate --platform P --duration N --headless' with
  'eosim run P --headless --timeout N' (correct command in eosim 0.1.0)
eosim run/simulate requires the platforms/ directory from the source
tree, which is not bundled in the published wheel. Jobs that need
eosim run now clone EoSim and pip install -e (editable) so __file__
resolves to the source tree with platforms/ available.
Platform names must include OS suffix (x86_64-linux, arm64-linux,
riscv64-linux) to match eosim platform registry entries.
Phase 1: Modernize Build System
- Upgrade CMake to 3.20+, fix version to 0.2.0
- Add CMakePresets.json (linux/windows/macos/arm/riscv/asan/ubsan)
- Add ARM Cortex-M4 and RISC-V 32-bit cross-compilation toolchains
- Add coverage, sanitizer, and static analysis CMake modules

Phase 2: Cross-Platform CI/CD & Docker
- Add GitHub Actions workflows: CI, nightly, weekly, release, simulation, eosim-sanity, CodeQL
- Add Docker multi-stage build and test images with docker-compose
- Add Dependabot and CodeQL security scanning

Phase 3-4: C++ Bindings & Math Library
- Add C++17 RAII bindings (Provider, Pipeline, types)
- Add header-only DSP math (vector ops, activations, windows)
- Add Q15/Q31 fixed-point arithmetic library

Phase 5: Testing Infrastructure Overhaul
- Add mock neural input generator (10 signal patterns)
- Add mock provider with failure injection
- Add extended tests for DSP, NN, decoder, stim safety, provider lifecycle
- Add full pipeline integration test

Phase 6: Enhanced Neural Signal Processing
- Add real-time artifact removal (blink, EMG, saturation)
- Add adaptive filters (LMS, NLMS, RLS)
- Add multi-channel feature fusion (CSP, coherence, channel selection)

Phase 7: Neural Network Integration
- Add minimal ONNX model loader (self-contained protobuf parser)
- Add LSTM layer with 4-gate architecture
- Add INT8 quantized inference engine
- Add CNN intent decoder (conv1d -> pool -> dense -> softmax)

Phase 8: HAL & Advanced Providers
- Add Hardware Abstraction Layer (SPI, I2C, GPIO, UART, ADC)
- Add wireless BCI provider (BLE/WiFi/Serial)
- Add template provider for third-party development
- Add simulation environment with EEG and BCI signal generators

Phase 9: Python/Node.js SDKs & Web GUI
- Add Python SDK with ctypes bindings, streaming, visualization
- Add Node.js/TypeScript SDK with event-driven streaming
- Add React web GUI with WebSocket backend

Phase 10: Edge AI, TinyML & Standards Compliance
- Add TFLite Micro integration bridge
- Add online learning with SGD and experience replay
- Add multi-modal feedback loop with latency tracking
- Add ROS 2 integration (node, messages, launch file)
- Add ONI (Open Neural Interface) compliance layer
- Add EIPC real-time streaming with delta compression
- Add model quantization tool and models directory
Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 6.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v4...v6)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3 to 4.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@v3...v4)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4 to 7.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@v4...v7)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release) from 1 to 2.
- [Release notes](https://github.com/softprops/action-gh-release/releases)
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md)
- [Commits](softprops/action-gh-release@v1...v2)

---
updated-dependencies:
- dependency-name: softprops/action-gh-release
  dependency-version: '2'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [actions/setup-python](https://github.com/actions/setup-python) from 5 to 6.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](actions/setup-python@v5...v6)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
CLOCK_MONOTONIC and clock_gettime are not available on bare-metal ARM
targets using newlib. Added preprocessor guard to skip POSIX clock on
bare-metal platforms (arm/thumb/aarch64 with newlib).
The Weekly workflow was reporting ALL tests as 'Not Run' because:

1. clang-tidy's --warnings-as-errors=bugprone-*,cert-* caused compilation
   of test binaries to fail during 'cmake --build build'.

2. The pipeline 'cmake --build ... | tee build-analysis.log' masked the
   non-zero exit code because tee always returns 0, so the workflow step
   appeared to pass and ctest ran against missing executables.

Fixes:
- Disable CMAKE_C_CPPCHECK and CMAKE_C_CLANG_TIDY in tests/CMakeLists.txt
  so static analysis runs on library code but not on test code (CMake
  scoping via add_subdirectory keeps this isolated).
- Add 'set -o pipefail' before the build pipeline in weekly.yml so any
  build failure correctly propagates and fails the step.
- dsp.c: NOLINT(bugprone-easily-swappable-parameters) on eni_dsp_artifact_detect and eni_dsp_epoch_init
- config.c: replace atof() with strtod(), atoi() with strtol() (cert-err34-c), check fclose() return value (cert-err33-c)
- nn.c: NOLINT(bugprone-easily-swappable-parameters) on nn_apply_activation
- CI: multi-OS build, cross-compile (aarch64/arm/riscv64), sanitizers, coverage
- Release: automated GitHub Releases with cross-compiled artifacts
- Security: CodeQL analysis + OSSF Scorecard
- Dependencies: Dependabot for GitHub Actions
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4 to 7.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@v4...v7)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Apr 3, 2026
@dependabot dependabot Bot added github_actions Pull requests that update GitHub Actions code dependencies Pull requests that update a dependency file labels Apr 3, 2026
@srpatcha srpatcha closed this Apr 3, 2026
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Apr 3, 2026

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot Bot deleted the dependabot/github_actions/actions/upload-artifact-7 branch April 3, 2026 21:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant