From a7b7776481531fef75ddddf43e9ddfc0581b9270 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 7 Oct 2026 15:47:57 +0000
Subject: [PATCH] ci: bump actions/upload-artifact from 4 to 6

Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4 to 6.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v4...v6)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/openssf_scorecard.yaml   | 2 +-
 .github/workflows/porch-compat-matrix.yaml | 4 ++--
 .github/workflows/porch-e2e-ci-jobs.yaml   | 4 ++--
 .github/workflows/porch-e2e-nightly.yaml   | 4 ++--
 .github/workflows/sonar-ci-artifacts.yaml  | 4 ++--
 5 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/.github/workflows/openssf_scorecard.yaml b/.github/workflows/openssf_scorecard.yaml
index 4d6d351dd..75cc2fc52 100644
--- a/.github/workflows/openssf_scorecard.yaml
+++ b/.github/workflows/openssf_scorecard.yaml
@@ -33,7 +33,7 @@ jobs:
           results_format: sarif
           publish_results: true
       - name: Upload artifact
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
+        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
         with:
           name: SARIF file
           path: results.sarif
diff --git a/.github/workflows/porch-compat-matrix.yaml b/.github/workflows/porch-compat-matrix.yaml
index e6eb51862..b7e549589 100644
--- a/.github/workflows/porch-compat-matrix.yaml
+++ b/.github/workflows/porch-compat-matrix.yaml
@@ -207,7 +207,7 @@ jobs:
 
       - name: Upload test results
         if: always()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         with:
           name: "compat-results-${{ matrix.server_version }}"
           path: .build/compat-results/
@@ -222,7 +222,7 @@ jobs:
           fi
       - name: Archive server logs
         if: always()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         with:
           name: "server-log-${{ matrix.server_version }}"
           path: server.log
diff --git a/.github/workflows/porch-e2e-ci-jobs.yaml b/.github/workflows/porch-e2e-ci-jobs.yaml
index 2330ec210..394732a60 100644
--- a/.github/workflows/porch-e2e-ci-jobs.yaml
+++ b/.github/workflows/porch-e2e-ci-jobs.yaml
@@ -101,7 +101,7 @@ jobs:
             ${IMAGE_REPO}/${PORCH_WRAPPER_SERVER_IMAGE}:${IMAGE_TAG} \
             | gzip > porch-images.tar.gz
       - name: Upload images
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         with:
           name: porch-images
           path: porch-images.tar.gz
@@ -236,7 +236,7 @@ jobs:
           kubectl -n porch-system logs -l k8s-app=porch-controllers --all-containers --tail=-1 > ${{ matrix.log_prefix }}-controllers.log 2>/dev/null || true
       - name: Archive logs
         if: always()
-        uses: actions/upload-artifact@v4  
+        uses: actions/upload-artifact@v6  
         with:
           name: ${{ matrix.log_prefix }}-logs
           path: "*.log"
diff --git a/.github/workflows/porch-e2e-nightly.yaml b/.github/workflows/porch-e2e-nightly.yaml
index 465619a62..46dca714a 100644
--- a/.github/workflows/porch-e2e-nightly.yaml
+++ b/.github/workflows/porch-e2e-nightly.yaml
@@ -79,7 +79,7 @@ jobs:
             ${IMAGE_REPO}/${PORCH_WRAPPER_SERVER_IMAGE}:${IMAGE_TAG} \
             | gzip > porch-images.tar.gz
       - name: Upload images
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         with:
           name: porch-images
           path: porch-images.tar.gz
@@ -192,7 +192,7 @@ jobs:
           kubectl -n porch-system logs -l k8s-app=porch-controllers --all-containers --tail=-1 > ${{ matrix.log_prefix }}-controllers.log 2>/dev/null || true
       - name: Archive logs
         if: always()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         with:
           name: ${{ matrix.log_prefix }}-logs
           path: "*.log"
diff --git a/.github/workflows/sonar-ci-artifacts.yaml b/.github/workflows/sonar-ci-artifacts.yaml
index 4efb66af0..4c9f013ac 100644
--- a/.github/workflows/sonar-ci-artifacts.yaml
+++ b/.github/workflows/sonar-ci-artifacts.yaml
@@ -43,7 +43,7 @@ jobs:
 
     - name: Archive test results
       if: steps.test.outcome == 'success'
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@v6
       with:
         name: coverage-report
         path: ./coverage.out
@@ -54,7 +54,7 @@ jobs:
       
     - name: Archive PR number
       if: github.event_name == 'pull_request'
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@v6
       with:
         name: PR_NUMBER
         path: PR_NUMBER.txt