bump(github-actions): Bump actions/upload-artifact from 6 to 7

[dependabot]

Bumps actions/upload-artifact from 6 to 7.

Release notes

Sourced from actions/upload-artifact's releases.

v7.0.0

v7 What's new

Direct Uploads

Adds support for uploading single files directly (unzipped). Callers can set the new archive parameter to false to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The name parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.

ESM

To support new versions of the @actions/* packages, we've upgraded the package to ESM.

What's Changed

• Add proxy integration test by @​Link- in actions/upload-artifact#754
• Upgrade the module to ESM and bump dependencies by @​danwkennedy in actions/upload-artifact#762
• Support direct file uploads by @​danwkennedy in actions/upload-artifact#764

New Contributors

• @​Link- made their first contribution in actions/upload-artifact#754

Full Changelog: actions/upload-artifact@v6...v7.0.0

Commits

• bbbca2d Support direct file uploads (#764)
• 589182c Upgrade the module to ESM and bump dependencies (#762)
• 47309c9 Merge pull request #754 from actions/Link-/add-proxy-integration-tests
• 02a8460 Add proxy integration test
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

Outdated packages (gnu64):

priority	nix_package	version_local	version_nixpkgs	version_upstream
15	libunistring	1.4.1	1.4.1	1.4.2
13	glibc	2.42-51	2.42	2.43
12	zlib	1.3.1	1.3.1	1.3.2
11	llvm	21.1.8	21.1.8	22.1.0;22.1
11	llvm	21.1.8	22.1.0-rc3	22.1.0;22.1
11	binutils	2.44	2.44	2.46;2.46.0
10	pcre2	10.46	10.46	10.47
4	numactl	2.0.18	2.0.18	2.0.19
4	kmod	31	31	34.2
4	rdma-core	60.0	61.0	62.0
2	hwloc	2.12.2	2.12.2	2.13.0
2	dpdk	25.07	25.07	25.11

[github-actions]

Vulnerable packages (gnu64):

vuln_id	url	package	severity	version_local	version_nixpkgs	version_upstream	package_repology	sortcol	classify
CVE-2026-27171	https://nvd.nist.gov/vuln/detail/CVE-2026-27171	zlib	2.9	1.3.1	1.3.1	1.3.2	zlib	2026A0000027171	fix_update_to_version_upstream
CVE-2026-22184	https://nvd.nist.gov/vuln/detail/CVE-2026-22184	zlib	9.8	1.3.1	1.3.1	1.3.2	zlib	2026A0000022184	fix_update_to_version_upstream
CVE-2025-15281	https://nvd.nist.gov/vuln/detail/CVE-2025-15281	glibc	7.5	2.42-51	2.42	2.43	glibc	2025A0000015281	fix_update_to_version_upstream
CVE-2025-8225	https://nvd.nist.gov/vuln/detail/CVE-2025-8225	binutils	3.3	2.44	2.44	2.46	binutils	2025A0000008225	fix_update_to_version_upstream
CVE-2025-8224	https://nvd.nist.gov/vuln/detail/CVE-2025-8224	binutils	3.3	2.44	2.44	2.46	binutils	2025A0000008224	fix_update_to_version_upstream
CVE-2025-6170	https://nvd.nist.gov/vuln/detail/CVE-2025-6170	libxml2	2.5	2.15.1	2.15.1	2.15.1	libxml2	2025A0000006170	err_not_vulnerable_based_on_repology
CVE-2025-6021	https://nvd.nist.gov/vuln/detail/CVE-2025-6021	libxml2	7.5	2.15.1	2.15.1	2.15.1	libxml2	2025A0000006021	err_not_vulnerable_based_on_repology
CVE-2025-3198	https://nvd.nist.gov/vuln/detail/CVE-2025-3198	binutils	3.3	2.44	2.44	2.46	binutils	2025A0000003198	fix_update_to_version_upstream
CVE-2025-1153	https://nvd.nist.gov/vuln/detail/CVE-2025-1153	binutils	3.1	2.44	2.44	2.46	binutils	2025A0000001153	fix_update_to_version_upstream
OSV-2024-698	https://osv.dev/OSV-2024-698	libxml2		2.15.1	2.15.1	2.15.1	libxml2	2024A0000000698	err_not_vulnerable_based_on_repology
CVE-2023-6992	https://nvd.nist.gov/vuln/detail/CVE-2023-6992	zlib	4.0	1.3.1	1.3.1	1.3.2	zlib	2023A0000006992	err_not_vulnerable_based_on_repology
CVE-2023-4039	https://nvd.nist.gov/vuln/detail/CVE-2023-4039	gcc	4.8	15.2.0	15.2.0	15.2.0	gcc	2023A0000004039	fix_not_available
OSV-2021-777	https://osv.dev/OSV-2021-777	libxml2		2.15.1	2.15.1	2.15.1	libxml2	2021A0000000777	err_not_vulnerable_based_on_repology
CVE-2016-2781	https://nvd.nist.gov/vuln/detail/CVE-2016-2781	coreutils	6.5	9.10	9.10	9.10	coreutils	2016A0000002781	fix_not_available