From 70af431bcc7446e7f7b70fb0e84b6e0b0291b6a6 Mon Sep 17 00:00:00 2001 From: Eldon Marks Date: Sun, 14 Jun 2026 19:07:07 -0400 Subject: [PATCH] ci: bump artifact actions to Node-24 majors (upload@v7, download@v8) actions/upload-artifact@v5 and download-artifact@v5 still run on Node 20 (deprecated; forced to Node 24 on runners from 2026-09-16). Bump to the latest majors, which both run node24: upload-artifact@v7, download-artifact@v8. They share the v4+ artifact backend, so the upload (build job) / download (publish jobs) pair stays compatible despite the different major numbers. publish-pypi.yaml is tag-triggered, so PR CI does not exercise it; the pair is validated at the next release tag. A mismatch would fail the publish job (download before publish) without uploading anything, so it cannot mis-publish. --- .github/workflows/publish-pypi.yaml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/publish-pypi.yaml b/.github/workflows/publish-pypi.yaml index e5019bd7..00271a1d 100644 --- a/.github/workflows/publish-pypi.yaml +++ b/.github/workflows/publish-pypi.yaml @@ -75,7 +75,7 @@ jobs: run: python -m twine check dist/* - name: Upload distributions - uses: actions/upload-artifact@v5 + uses: actions/upload-artifact@v7 with: name: dist path: dist/ @@ -90,7 +90,7 @@ jobs: id-token: write steps: - name: Download distributions - uses: actions/download-artifact@v5 + uses: actions/download-artifact@v8 with: name: dist path: dist/ @@ -110,7 +110,7 @@ jobs: id-token: write steps: - name: Download distributions - uses: actions/download-artifact@v5 + uses: actions/download-artifact@v8 with: name: dist path: dist/