From 422ea1020c83527892f866695b3c023f4fe9e00c Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 31 Mar 2026 10:08:57 +0000
Subject: [PATCH] ci(deps): bump actions/upload-artifact from 4.4.3 to 7.0.0

Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.4.3 to 7.0.0.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882...bbbca2ddaa5d8feaa63e36b76fdaad77386f024f)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/continuous-integration.yml | 8 ++++----
 .github/workflows/security-scan.yml          | 2 +-
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/continuous-integration.yml b/.github/workflows/continuous-integration.yml
index d77604c..120ecfc 100644
--- a/.github/workflows/continuous-integration.yml
+++ b/.github/workflows/continuous-integration.yml
@@ -119,7 +119,7 @@ jobs:
           tar czf "${RUNNER_TEMP}/next-build.tar.gz" -C SortVision .next
 
       - name: Upload Next.js build output
-        uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3
+        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
         with:
           name: next-build
           path: ${{ runner.temp }}/next-build.tar.gz
@@ -226,7 +226,7 @@ jobs:
 
       - name: Upload QA metrics artifact (for PR / push baselines)
         if: (github.event_name == 'push' || github.event_name == 'pull_request') && always()
-        uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3
+        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
         with:
           name: qa-metrics
           path: SortVision/qa-metrics.json
@@ -252,7 +252,7 @@ jobs:
 
       - name: Upload QA PR comment artifact
         if: github.event_name == 'pull_request' && always()
-        uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3
+        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
         with:
           name: qa-pr-comment
           path: SortVision/.qa-pr-comment/
@@ -312,7 +312,7 @@ jobs:
       # treosh uploads GitHub artifacts before `lhci upload --target=filesystem` writes manifest.json, so the zip
       # from uploadArtifacts does not include it. Upload manifest after the action for lighthouse-summary / PR comment.
       - name: Upload Lighthouse manifest (for summary)
-        uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3
+        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
         with:
           name: lighthouse-manifest-${{ matrix.variant }}
           path: .lighthouseci/manifest.json
diff --git a/.github/workflows/security-scan.yml b/.github/workflows/security-scan.yml
index fc7d580..80bc1db 100644
--- a/.github/workflows/security-scan.yml
+++ b/.github/workflows/security-scan.yml
@@ -57,7 +57,7 @@ jobs:
 
       - name: Upload audit results
         if: always()
-        uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3
+        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
         with:
           name: security-audit-results
           path: SortVision/audit-results.json