CI flake: Verify global.json files are symlinks

[clockwork-labs-bot]

Detected by CI Gremlin after a failed GitHub Actions attempt succeeded on rerun.

Tests:

• Verify global.json files are symlinks

Error:
Failed to FinalizeArtifact: Received non-retryable error: Failed request: (403) Forbidden: Error from intermediary with HTTP status code 403 "Forbidden"
Node 20 is being deprecated. This workflow is running with Node 24 by default. If you need to temporarily use Node 20, you can set the ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true environment variable.

Failed job runs:

• https://github.com/clockworklabs/SpacetimeDB/actions/runs/34253018158/job/102152920476 (Verify global.json files are symlinks, attempt 1 -> 2)

Timeout detection:

• none

Context:

• none

[clockwork-labs-bot]

Diagnosis for the exact linked job/attempt: run 34253018158, job 102152920476, Verify global.json files are symlinks, attempt 1.

GitHub's job API reports the linked job as run_attempt: 1, matching the ticket's failed attempt 1 -> 2 rerun. The workflow was CI for PR #5884 (Version bump 2.10.1), head SHA f5a76e0a9cf9c92e0b557618d6134b668262be71, on runner ghr-github-self-hosted-ubuntu-14900k-02-spacetimedb-14-23f0e633.

The actual policy check passed. cargo ci global-json-policy compiled and ran, then printed OK for every checked global.json. The failure happened afterward in actions/upload-artifact@v4 while uploading cargo timing artifacts:

With the provided path, there will be 2 files uploaded
Finished uploading artifact content to blob storage!
Finalizing artifact upload
##[error]Failed to FinalizeArtifact: Received non-retryable error: Failed request: (403) Forbidden: Error from intermediary with HTTP status code 403 "Forbidden"

Root cause visible in this exact attempt: GitHub Actions artifact finalization/blob-storage infrastructure returned a 403 after the job's real work had already succeeded. This is CI service/artifact upload flake, not a SpacetimeDB test or global.json policy failure. The Node 20 deprecation line is adjacent warning noise from GitHub Actions.

Suggested updated title: CI flake: upload-artifact FinalizeArtifact 403 Forbidden

Duplicate analysis:

• Top duplicate candidate: CI flake: Test spacetimedb-update flow (x86_64-pc-windows-msvc) #5885. It is the oldest ticket I found with the same Failed to FinalizeArtifact / intermediary 403 Forbidden artifact finalization mechanism.
• Other same-family Test Flakes tickets: CI flake: Prepare SDK test clients (native) #5886 has the same artifact-finalization 403 in a different CI job. This ticket (CI flake: Verify global.json files are symlinks #5889) is another same-family repeat.
• I searched exact and fallback terms including Failed to FinalizeArtifact 403, Error from intermediary Forbidden, FinalizeArtifact Forbidden intermediary, and Artifact 403 Forbidden upload artifact.

Leaving this open because the top duplicate candidate is #5885, not one of the automatic duplicate-close allowlist issues.