From 63e9e5df4160316ded8d305e426272ba4e4816d6 Mon Sep 17 00:00:00 2001
From: "bfra-me[bot]" <118100583+bfra-me[bot]@users.noreply.github.com>
Date: Fri, 13 Mar 2026 04:50:46 +0000
Subject: [PATCH] ci(deps): update actions/upload-artifact action to v7

---
 .github/workflows/ci.yaml        | 2 +-
 .github/workflows/scorecard.yaml | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index d316ee88..19002e97 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -112,7 +112,7 @@ jobs:
           fi
         id: diff
       # If index.js was different than expected, upload the expected version as an artifact
-      - uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
+      - uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
         if: ${{ failure() && steps.diff.conclusion == 'failure' }}
         with:
           name: dist
diff --git a/.github/workflows/scorecard.yaml b/.github/workflows/scorecard.yaml
index 5cd43141..b5d5d2fd 100644
--- a/.github/workflows/scorecard.yaml
+++ b/.github/workflows/scorecard.yaml
@@ -57,7 +57,7 @@ jobs:
       # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
       # format to the repository Actions tab.
       - name: Upload artifact
-        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
+        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
         with:
           name: SARIF file
           path: results.sarif