From f775dc5834cb89786d2c63ca46904835306b0e5f Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Wed, 11 Nov 2026 03:12:58 +0000
Subject: [PATCH] chore(deps): update actions/upload-artifact action to v7

---
 .github/workflows/ci.yml              | 16 ++++++++--------
 .github/workflows/mesh-cross-node.yml |  2 +-
 2 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index da9a436e4b..6c83a3d7b8 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -48,7 +48,7 @@ jobs:
         run: ./bin/node scripts/ci-test-report.mjs kind=vitest report=test-results/ci/vitest.json evidence=test-results/ci/vitest-timing.json title="Vitest shard ${{ matrix.shard }}/6" -- ./bin/pnpm exec vitest run --shard=${{ matrix.shard }}/6 --reporter=default --reporter=json --outputFile=test-results/ci/vitest.json
       - name: Vitest timing evidence
         if: always()
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7
         with:
           name: vitest-timing-${{ matrix.shard }}
           path: test-results/ci
@@ -92,7 +92,7 @@ jobs:
           ./bin/cargo test --manifest-path src-tauri/Cargo.toml host_process --lib 2>&1 | tee test-results/protection/native.log
       - name: Protection test evidence
         if: always()
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7
         with:
           name: agent-protection
           path: test-results/protection
@@ -227,7 +227,7 @@ jobs:
         run: ./bin/pnpm perf --scenario all --repeat 1 --cpu 4
       - name: Measurement evidence
         if: always()
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7
         with:
           name: browser-measurements
           path: |
@@ -263,7 +263,7 @@ jobs:
           cd target/browser-artifact
           sha256sum fixture-bridge buzzodz > SHA256SUMS
           tar -cf ../browser-fixture.tar fixture-bridge buzzodz revision SHA256SUMS
-      - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+      - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7
         id: fixture-upload
         with:
           name: browser-fixture-${{ github.sha }}-${{ github.run_attempt }}
@@ -347,7 +347,7 @@ jobs:
         run: ./bin/node scripts/ci-test-report.mjs kind=playwright report=test-results/browser/ci-report.json evidence=test-results/browser/ci-timing.json title="Browser journeys (${{ matrix.engine }}, ${{ matrix.shard }}/${{ matrix.shards }})" -- ./bin/pnpm test:browser:ci --project ${{ matrix.engine }} --no-deps --shard=${{ matrix.shard }}/${{ matrix.shards }} --reporter=list,json
       - name: Browser evidence
         if: always()
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7
         with:
           name: browser-journeys-${{ matrix.engine }}-${{ matrix.shard }}
           path: test-results/browser
@@ -373,7 +373,7 @@ jobs:
         run: ./bin/node scripts/ci-test-report.mjs kind=playwright report=test-results/browser/ci-report.json evidence=test-results/browser/ci-timing.json title="WebKit recording (macOS)" -- ./bin/pnpm test:browser --project webkit --grep @media-recorder --no-deps --reporter=list,json
       - name: Recording evidence
         if: always()
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7
         with:
           name: browser-media-recorder-webkit
           path: test-results/browser
@@ -429,7 +429,7 @@ jobs:
         run: ./bin/node scripts/flake-check.mjs vitest --iterations=5 $SELECTED
       - name: Vitest iteration reports
         if: always()
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7
         with:
           name: flake-vitest-${{ matrix.batch }}
           path: test-results/flake
@@ -488,7 +488,7 @@ jobs:
         run: ./bin/node scripts/ci-test-report.mjs kind=playwright report=test-results/browser/ci-report.json evidence=test-results/browser/ci-timing.json title="Flake check (${{ matrix.engine }}, ${{ matrix.shard }}/${{ needs.flake_select.outputs.browser_shard_total }})" -- ./bin/pnpm test:browser:ci --project ${{ matrix.engine }} --no-deps --repeat-each=10 --shard=${{ matrix.shard }}/${{ needs.flake_select.outputs.browser_shard_total }} --reporter=list,json $SELECTED
       - name: Browser repetition evidence
         if: always()
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7
         with:
           name: flake-browser-${{ matrix.engine }}-${{ matrix.shard }}
           path: test-results/browser
diff --git a/.github/workflows/mesh-cross-node.yml b/.github/workflows/mesh-cross-node.yml
index 4af1bf9fd1..eb3cab1262 100644
--- a/.github/workflows/mesh-cross-node.yml
+++ b/.github/workflows/mesh-cross-node.yml
@@ -48,7 +48,7 @@ jobs:
         run: scripts/ci-mesh-cross-node.sh
       - name: Evidence (includes ephemeral test identities only)
         if: always()
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7
         with:
           name: mesh-cross-node
           path: test-results/mesh-cross-node