From 8a204586a8bbe13b48233e2cf7acdd1e5d56586a Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 4 Nov 2024 08:47:20 +0000 Subject: [PATCH] Bump actions/upload-artifact from 4.4.0 to 4.4.3 Closes https://github.com/dart-lang/sdk/pull/56890 GitOrigin-RevId: fdc30c6acc7f02fc0b15d23cb00cb3360d6869a8 Change-Id: I9dd46932e234042ccfdd9342e30e2e134d094932 Reviewed-on: https://dart-review.googlesource.com/c/sdk/+/389342 Reviewed-by: Alexander Thomas --- .github/workflows/scorecards-analysis.yml | 2 +- .github/workflows/third-party-deps-scan.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/scorecards-analysis.yml b/.github/workflows/scorecards-analysis.yml index 1c44fca3bad..d2548c6d5f7 100644 --- a/.github/workflows/scorecards-analysis.yml +++ b/.github/workflows/scorecards-analysis.yml @@ -44,7 +44,7 @@ jobs: # Upload the results as artifacts (optional). - name: "Upload artifact" - uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 + uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 with: name: SARIF file path: results.sarif diff --git a/.github/workflows/third-party-deps-scan.yml b/.github/workflows/third-party-deps-scan.yml index 1c726562a92..cd641961418 100644 --- a/.github/workflows/third-party-deps-scan.yml +++ b/.github/workflows/third-party-deps-scan.yml @@ -32,7 +32,7 @@ jobs: - name: "extract deps, find commit hash, pass to osv-scanner" run: python .github/extract_deps.py --output osv-lockfile-${{github.sha}}.json - name: "upload osv-scanner deps" - uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 + uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 with: # use github.ref in name to avoid duplicated artifacts name: osv-lockfile-${{github.sha}}