From 936ec44b566d0006e43485ba88a6e3ce3b42b69d Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 15 Apr 2026 15:52:46 +0000
Subject: [PATCH] build(deps): bump actions/upload-artifact from 3 to 7

Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 3 to 7.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v3...v7)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/ci.yml                           | 6 +++---
 .github/workflows/understand-first-commenter.yml   | 2 +-
 .github/workflows/understand-first-pr-analysis.yml | 2 +-
 .github/workflows/understand-first.yml             | 8 ++++----
 4 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 4a59a71..74831b8 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -95,7 +95,7 @@ jobs:
       - name: Generate CycloneDX SBOM from locked requirements
         run: |
           uv run cyclonedx-py requirements requirements.txt --of json -o sbom.cdx.json
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@v7
         with:
           name: sbom
           path: sbom.cdx.json
@@ -123,7 +123,7 @@ jobs:
         run: twine check dist/*
 
       - name: Upload build artifacts
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: dist
           path: dist/
@@ -204,7 +204,7 @@ jobs:
         run: bandit -r cli/ -f json -o bandit-report.json || true
 
       - name: Upload security report
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: security-report
           path: bandit-report.json
diff --git a/.github/workflows/understand-first-commenter.yml b/.github/workflows/understand-first-commenter.yml
index 826905a..52f8424 100644
--- a/.github/workflows/understand-first-commenter.yml
+++ b/.github/workflows/understand-first-commenter.yml
@@ -190,7 +190,7 @@ jobs:
           "
 
       - name: Upload analysis artifacts
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v7
         with:
           name: understand-first-pr-analysis-${{ github.event.number || github.event.inputs.pr_number }}
           path: |
diff --git a/.github/workflows/understand-first-pr-analysis.yml b/.github/workflows/understand-first-pr-analysis.yml
index 6ae4116..c73007d 100644
--- a/.github/workflows/understand-first-pr-analysis.yml
+++ b/.github/workflows/understand-first-pr-analysis.yml
@@ -89,7 +89,7 @@ jobs:
           echo "Policy check exit code: $POLICY_EXIT_CODE"
 
       - name: Upload analysis artifacts
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v7
         with:
           name: understand-first-analysis
           path: |
diff --git a/.github/workflows/understand-first.yml b/.github/workflows/understand-first.yml
index 8932f11..b078452 100644
--- a/.github/workflows/understand-first.yml
+++ b/.github/workflows/understand-first.yml
@@ -166,7 +166,7 @@ jobs:
           git stash pop
 
       - name: Upload Analysis Artifacts
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v7
         with:
           name: understand-first-analysis
           path: |
@@ -178,7 +178,7 @@ jobs:
 
       - name: Upload Code Map Delta
         if: steps.diff.outputs.changes_detected == 'true'
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v7
         with:
           name: code-map-delta
           path: maps/delta.svg
@@ -186,7 +186,7 @@ jobs:
 
       - name: Upload Understanding Tour
         if: steps.lens.outputs.lens_created == 'true'
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v7
         with:
           name: understanding-tour
           path: tours/pr-tour.md
@@ -194,7 +194,7 @@ jobs:
 
       - name: Upload Context Debt Dashboard
         if: steps.lens.outputs.lens_created == 'true'
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v7
         with:
           name: context-debt-dashboard
           path: context-debt-dashboard.html