From f14aeac34d7b196f2a2af3780f19f8da0abee555 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 24 Dec 2025 03:01:27 +0000
Subject: [PATCH] build(deps): bump the actions group with 2 updates

Bumps the actions group with 2 updates: [actions/upload-artifact](https://github.com/actions/upload-artifact) and [actions/download-artifact](https://github.com/actions/download-artifact).


Updates `actions/upload-artifact` from 5 to 6
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v5...v6)

Updates `actions/download-artifact` from 6 to 7
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](https://github.com/actions/download-artifact/compare/v6...v7)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: actions/download-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/ci.yaml | 48 +++++++++++++++++++--------------------
 1 file changed, 24 insertions(+), 24 deletions(-)

diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index e60fd23ab..ea896f6e0 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -60,7 +60,7 @@ jobs:
       - name: Archive the build to preserve permissions
         run: tar -cvzf updater-build.tgz bin/updater
 
-      - uses: actions/upload-artifact@v5
+      - uses: actions/upload-artifact@v6
         with:
           name: updater-build
           path: updater-build.tgz
@@ -93,7 +93,7 @@ jobs:
       - name: Archive the build to preserve permissions
         run: tar -cvzf scanner-build-${{ matrix.goos }}-${{ matrix.goarch }}.tgz image/scanner/bin/scanner
 
-      - uses: actions/upload-artifact@v5
+      - uses: actions/upload-artifact@v6
         with:
           name: scanner-build-${{ matrix.goos }}-${{ matrix.goarch }}
           path: scanner-build-${{ matrix.goos }}-${{ matrix.goarch }}.tgz
@@ -177,7 +177,7 @@ jobs:
 
       - uses: ./.github/actions/job-preamble
 
-      - uses: actions/download-artifact@v6
+      - uses: actions/download-artifact@v7
         with:
           name: updater-build
 
@@ -190,12 +190,12 @@ jobs:
           source ./scripts/ci/lib.sh
           generate_genesis_dump
 
-      - uses: actions/upload-artifact@v5
+      - uses: actions/upload-artifact@v6
         with:
           name: genesis-dump
           path: /tmp/genesis-dump/genesis-dump.zip
 
-      - uses: actions/upload-artifact@v5
+      - uses: actions/upload-artifact@v6
         with:
           name: vuln-dump
           path: /tmp/vuln-dump
@@ -219,7 +219,7 @@ jobs:
 
       - uses: ./.github/actions/job-preamble
 
-      - uses: actions/download-artifact@v6
+      - uses: actions/download-artifact@v7
         with:
           name: updater-build
 
@@ -227,7 +227,7 @@ jobs:
         run: |
           tar xvzf updater-build.tgz
 
-      - uses: actions/download-artifact@v6
+      - uses: actions/download-artifact@v7
         with:
           name: genesis-dump
           path: /tmp/genesis-dump
@@ -237,7 +237,7 @@ jobs:
           source ./scripts/ci/lib.sh
           generate_db_dump
 
-      - uses: actions/upload-artifact@v5
+      - uses: actions/upload-artifact@v6
         with:
           name: db-dump
           path: /tmp/postgres/pg-definitions.sql.gz
@@ -267,7 +267,7 @@ jobs:
 
       - uses: ./.github/actions/job-preamble
 
-      - uses: actions/download-artifact@v6
+      - uses: actions/download-artifact@v7
         with:
           name: scanner-build-${{ matrix.goos }}-${{ matrix.goarch }}
 
@@ -275,7 +275,7 @@ jobs:
         run: |
           tar xvzf scanner-build-${{ matrix.goos }}-${{ matrix.goarch }}.tgz
 
-      - uses: actions/download-artifact@v6
+      - uses: actions/download-artifact@v7
         # Run this step if it's not a PR or the PR contains the `generate-dumps-on-pr` label
         # When this step is skipped `get_genesis_dump` will pull the vulnerability data from our GCS bucket
         if: |
@@ -299,7 +299,7 @@ jobs:
       - name: Archive the bundle to preserve permissions
         run: tar -cvzf scanner-bundle-${{ matrix.goos }}-${{ matrix.goarch }}.tgz image/scanner/rhel
 
-      - uses: actions/upload-artifact@v5
+      - uses: actions/upload-artifact@v6
         with:
           name: scanner-bundle-${{ matrix.goos }}-${{ matrix.goarch }}
           path: scanner-bundle-${{ matrix.goos }}-${{ matrix.goarch }}.tgz
@@ -324,7 +324,7 @@ jobs:
 
       - uses: ./.github/actions/job-preamble
 
-      - uses: actions/download-artifact@v6
+      - uses: actions/download-artifact@v7
         if: |
           github.event_name != 'pull_request' ||
           contains(github.event.pull_request.labels.*.name, 'generate-dumps-on-pr')
@@ -340,7 +340,7 @@ jobs:
       - name: Make db bundle
         run: image/db/rhel/create-bundle.sh image/db image/db/rhel
 
-      - uses: actions/upload-artifact@v5
+      - uses: actions/upload-artifact@v6
         with:
           name: scanner-db-bundle
           path: image/db/rhel
@@ -383,7 +383,7 @@ jobs:
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
 
-      - uses: actions/download-artifact@v6
+      - uses: actions/download-artifact@v7
         with:
           name: scanner-bundle-${{ matrix.goos }}-${{ matrix.goarch }}
 
@@ -391,7 +391,7 @@ jobs:
         run: |
           tar xvzf scanner-bundle-${{ matrix.goos }}-${{ matrix.goarch }}.tgz
 
-      - uses: actions/download-artifact@v6
+      - uses: actions/download-artifact@v7
         with:
           name: scanner-db-bundle
           path: image/db/rhel
@@ -494,7 +494,7 @@ jobs:
 
       - uses: ./.github/actions/job-preamble
 
-      - uses: actions/download-artifact@v6
+      - uses: actions/download-artifact@v7
         with:
           name: updater-build
 
@@ -502,7 +502,7 @@ jobs:
         run: |
           tar xvzf updater-build.tgz
 
-      - uses: actions/download-artifact@v6
+      - uses: actions/download-artifact@v7
         with:
           name: genesis-dump
           path: /tmp/genesis-dump
@@ -510,12 +510,12 @@ jobs:
       - name: diff-dumps
         run: ./scripts/ci/jobs/diff-dumps.sh
 
-      - uses: actions/upload-artifact@v5
+      - uses: actions/upload-artifact@v6
         with:
           name: diff-dumps-inspect
           path: /tmp/diff-dumps-inspect
 
-      - uses: actions/upload-artifact@v5
+      - uses: actions/upload-artifact@v6
         with:
           name: offline-dump
           path: /tmp/offline-dump/scanner-vuln-updates.zip
@@ -541,7 +541,7 @@ jobs:
           fetch-depth: 0
           ref: ${{ github.event.pull_request.head.sha }}
 
-      - uses: actions/download-artifact@v6
+      - uses: actions/download-artifact@v7
         with:
           name: offline-dump
 
@@ -612,7 +612,7 @@ jobs:
 
       - uses: ./.github/actions/job-preamble
 
-      - uses: actions/download-artifact@v6
+      - uses: actions/download-artifact@v7
         with:
           name: db-dump
           path: /tmp/postgres
@@ -641,12 +641,12 @@ jobs:
 
       - uses: ./.github/actions/handle-tagged-build
 
-      - uses: actions/download-artifact@v6
+      - uses: actions/download-artifact@v7
         with:
           name: vuln-dump
           path: /tmp/vuln-dump
 
-      - uses: actions/download-artifact@v6
+      - uses: actions/download-artifact@v7
         with:
           name: db-dump
           path: /tmp/postgres
@@ -673,7 +673,7 @@ jobs:
 
       - uses: ./.github/actions/job-preamble
 
-      - uses: actions/download-artifact@v6
+      - uses: actions/download-artifact@v7
         with:
           name: vuln-dump
           path: /tmp/vuln-dump