chore(deps): update github-actions to v7 - workflows - .github/workflows/scorecard.yml (major)

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/upload-artifact	action	major	v6.0.0 → v7.0.0
actions/upload-artifact	action	major	v6 → v7
cypress-io/github-action	action	major	v6.10.9 → v7.1.5

---

Release Notes

actions/upload-artifact (actions/upload-artifact)

v7.0.0

Compare Source

v7 What's new

Direct Uploads

Adds support for uploading single files directly (unzipped). Callers can set the new archive parameter to false to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The name parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.

ESM

To support new versions of the @actions/* packages, we've upgraded the package to ESM.

What's Changed

• Add proxy integration test by @​Link- in #​754
• Upgrade the module to ESM and bump dependencies by @​danwkennedy in #​762
• Support direct file uploads by @​danwkennedy in #​764

New Contributors

• @​Link- made their first contribution in #​754

Full Changelog: actions/upload-artifact@v6...v7.0.0

cypress-io/github-action (cypress-io/github-action)

v7.1.5

Compare Source

Bug Fixes

• update fast-xml-parser to 5.4.1 (#​1667) (bc22e01)

v7.1.4

Compare Source

Bug Fixes

• update minimatch to 3.1.5 (#​1665) (f9ffb60)

v7.1.3

Compare Source

Bug Fixes

• deps: update fast-xml-parser to 5.3.6 (#​1656) (e44ee0f)

v7.1.2

Compare Source

Bug Fixes

• deps: update fast-xml-parser to 5.3.4 (#​1648) (9992daa)

v7.1.1

Compare Source

Bug Fixes

• deps: update @​actions/* (#​1645) (0f330eb)

v7.1.0

Compare Source

v7.0.0

Compare Source

Features

• deps: update action from node20 to node24 (#​1639) (dca9861)

BREAKING CHANGES

• deps: Update action from node20 to node24
  cypress-io/github-action@​v6, using node20, is deprecated

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[netlify]

✅ Deploy Preview for endearing-brigadeiros-63f9d0 canceled.

Name	Link
🔨 Latest commit	f0478ac
🔍 Latest deploy log	https://app.netlify.com/projects/endearing-brigadeiros-63f9d0/deploys/69a6c18a4f2137000881f757

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package	Version	Score	Details
actions/actions/upload-artifact	bbbca2ddaa5d8feaa63e36b76fdaad77386f024f	🟢 6.2	Details Check Score Reason Code-Review 🟢 10 all changesets reviewed Maintained 🟢 10 29 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10 Binary-Artifacts 🟢 10 no binaries found in the repo Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Packaging ⚠️ -1 packaging workflow not detected CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Pinned-Dependencies ⚠️ 1 dependency not pinned by hash detected -- score normalized to 1 Fuzzing ⚠️ 0 project is not fuzzed License 🟢 10 license file detected Signed-Releases ⚠️ -1 no releases found Security-Policy 🟢 9 security policy file detected Branch-Protection ⚠️ 0 branch protection not enabled on development/release branches SAST 🟢 10 SAST tool is run on all commits

Scanned Files

• .github/workflows/scorecard.yml

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 81.77%. Comparing base (53c9353) to head (f0478ac).
⚠️ Report is 2 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #1439   +/-   ##
=======================================
  Coverage   81.77%   81.77%           
=======================================
  Files          67       67           
  Lines        4769     4769           
  Branches      827      827           
=======================================
  Hits         3900     3900           
  Misses        853      853           
  Partials       16       16           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.