diagnostics icon indicating copy to clipboard operation
diagnostics copied to clipboard
verified publisher icon nodejs

Update `actions/upload-artifact` to v4

Open targos opened this issue 1 year ago • 3 comments

https://github.com/nodejs/diagnostics/blob/7f106c1bfcf9489cb1df24bebed773eb0c03eaba/.github/workflows/scorecards.yml#L61

Version 3 will stop working on January 30th, 2025: https://github.blog/changelog/2024-04-16-deprecation-notice-v3-of-the-artifact-actions/

targos avatar Dec 13 '24 13:12 targos

That file seems to be generated by stepsecurity.io. Might need to check with them if there's a reason why it's version-locked and has not been updated.

cc @RafaelGSS Seems you are the committer on that. Do you know if we can just update that?

Qard avatar Dec 13 '24 13:12 Qard

cc: @UlisesGascon @nodejs/security-wg

I'm almost sure we can update that. I believe dependabot is just not working on this repository?

RafaelGSS avatar Dec 13 '24 14:12 RafaelGSS

Quite possibly it was never configured given there's no code dependencies in this repo, it's all just text content. 🤔

Qard avatar Dec 16 '24 06:12 Qard