Skip to content

Pin upload-artifact to v7.0.1 and download-artifact to v8.0.1#92757

Merged
mmastrac merged 1 commit intocanaryfrom
mmastrac/pin-artifact-actions
Apr 14, 2026
Merged

Pin upload-artifact to v7.0.1 and download-artifact to v8.0.1#92757
mmastrac merged 1 commit intocanaryfrom
mmastrac/pin-artifact-actions

Conversation

@mmastrac
Copy link
Copy Markdown
Contributor

@mmastrac mmastrac commented Apr 13, 2026 •
edited
Loading

What

  • Pin all actions/upload-artifact references to v7.0.1 (043fb46d1a93c77aae656e7c1c64a875d1fc6a0a)
  • Pin all actions/download-artifact references to v8.0.1 (3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c)

@mmastrac
Pin upload-artifact to v7.0.1 and download-artifact to v8.0.1
1179cc0 
Pin all actions/upload-artifact and actions/download-artifact references
to the latest versions with full commit SHA hashes for supply chain
security.
@nextjs-bot nextjs-bot added the created-by: Turbopack team PRs by the Turbopack team. label Apr 13, 2026
@mmastrac mmastrac mentioned this pull request Apr 14, 2026
Draft
@mmastrac Graphite App
Copy link
Copy Markdown
Contributor Author

mmastrac commented Apr 14, 2026 •
edited
Loading

This stack of pull requests is managed by Graphite. Learn more about stacking.

@mmastrac mmastrac mentioned this pull request Apr 14, 2026
Merged
@mmastrac mmastrac enabled auto-merge (squash) April 14, 2026 00:22
@nextjs-bot
Copy link
Copy Markdown
Collaborator

nextjs-bot commented Apr 14, 2026

Stats from current PR

✅ No significant changes detected

📊 All Metrics
📖 Metrics Glossary

Dev Server Metrics:

  • Listen = TCP port starts accepting connections
  • First Request = HTTP server returns successful response
  • Cold = Fresh build (no cache)
  • Warm = With cached build artifacts

Build Metrics:

  • Fresh = Clean build (no .next directory)
  • Cached = With existing .next directory

Change Thresholds:

  • Time: Changes < 50ms AND < 10%, OR < 2% are insignificant
  • Size: Changes < 1KB AND < 1% are insignificant
  • All other changes are flagged to catch regressions

⚡ Dev Server

Metric Canary PR Change Trend
Cold (Listen) 456ms 456ms ✓ █▁▁██
Cold (Ready in log) 445ms 446ms ✓ ▆▅█▅▂
Cold (First Request) 1.080s 1.114s ✓ ▁█▁▁█
Warm (Listen) 457ms 457ms ✓ ▁█▁▁▁
Warm (Ready in log) 446ms 444ms ✓ ▁▇▄▂▄
Warm (First Request) 346ms 351ms ✓ ▁█▅▃▅
📦 Dev Server (Webpack) (Legacy)

📦 Dev Server (Webpack)

Metric Canary PR Change Trend
Cold (Listen) 456ms 455ms ✓ ▅█▁▅▅
Cold (Ready in log) 437ms 438ms ✓ ▃▁▆▅▃
Cold (First Request) 1.891s 1.866s ✓ ▁▁▄▄▂
Warm (Listen) 455ms 455ms ✓ █▅▅▅▁
Warm (Ready in log) 436ms 438ms ✓ ▃▁█▅▃
Warm (First Request) 1.889s 1.874s ✓ ▁▁▇▆▅

⚡ Production Builds

Metric Canary PR Change Trend
Fresh Build 3.901s 3.923s ✓ ▆▂▆▆▃
Cached Build 3.853s 3.891s ✓ ▅▄▇▅▂
📦 Production Builds (Webpack) (Legacy)

📦 Production Builds (Webpack)

Metric Canary PR Change Trend
Fresh Build 14.498s 14.459s ✓ ▁▂▅▅▄
Cached Build 14.595s 14.582s ✓ ▁▁▇▅▁
node_modules Size 493 MB 493 MB ✓ █████
📦 Bundle Sizes

Bundle Sizes

⚡ Turbopack

Client

Main Bundles
Canary PR Change
003q3zf-_j90o.js gzip 154 B N/A -
053b9v5j96uu_.js gzip 8.56 kB N/A -
07rxhp_1_g4mu.js gzip 13.1 kB N/A -
096aa2uod0_wa.js gzip 9.82 kB N/A -
0cz1d0mv5g_q7.js gzip 39.4 kB 39.4 kB ✓
0ea8vo2o6kp_s.js gzip 13.3 kB N/A -
0egovw6-5i1e3.js gzip 8.57 kB N/A -
0ek_k55_6bo3v.js gzip 156 B N/A -
0fli3_wppnim5.js gzip 12.9 kB N/A -
0i-rrmz-wd2gx.js gzip 156 B N/A -
0k09jwjeb-tki.js gzip 13.8 kB N/A -
0kb7_ep3r1z0_.js gzip 10.1 kB N/A -
0kmgih16pb2zy.js gzip 9.24 kB N/A -
0wxpyd8r-vipl.js gzip 1.47 kB N/A -
16lhqjoqbznyg.js gzip 220 B 220 B ✓
16vepdkipri3r.js gzip 8.51 kB N/A -
17n96uu6y1pxq.js gzip 8.6 kB N/A -
1cml77k0cjco9.js gzip 168 B N/A -
1elt1qium-r2m.css gzip 115 B 115 B ✓
1ldzw5bsf3-0l.js gzip 158 B N/A -
1rk604e6mevef.js gzip 158 B N/A -
1wj60c-jqsx-n.js gzip 65.5 kB N/A -
1xz7fhgdco-x_.js gzip 8.59 kB N/A -
2__-e_ym8n788.js gzip 450 B N/A -
22o6xd9_ywdu6.js gzip 233 B N/A -
298segop7mz8t.js gzip 155 B N/A -
2k1q_gre6hp0-.js gzip 8.56 kB N/A -
2kvj8yrfznmwx.js gzip 5.69 kB N/A -
2rw6naw2b83yz.js gzip 155 B N/A -
2sgqisp4604si.js gzip 8.51 kB N/A -
2w6v6x0pu6b9t.js gzip 152 B N/A -
3-gysh_p9nr43.js gzip 154 B N/A -
32vddve-rleg-.js gzip 155 B N/A -
342ijzvrpe53h.js gzip 2.29 kB N/A -
3r9j-437x-6se.js gzip 70.8 kB N/A -
3u413wiqvqf_u.js gzip 49.1 kB N/A -
3v9s-fz24f8oo.js gzip 10.4 kB N/A -
3yexkdj8m6t6w.js gzip 156 B N/A -
420pn_b9x-3ir.js gzip 8.62 kB N/A -
44un3--wmqiyh.js gzip 7.61 kB N/A -
45b-gnabw9j10.js gzip 159 B N/A -
turbopack-03..-ma2.js gzip 4.19 kB N/A -
turbopack-13..kpmz.js gzip 4.19 kB N/A -
turbopack-1e..mq-a.js gzip 4.19 kB N/A -
turbopack-1m..v-xx.js gzip 4.19 kB N/A -
turbopack-1p..9plq.js gzip 4.19 kB N/A -
turbopack-2g..vuez.js gzip 4.19 kB N/A -
turbopack-2h..9hvz.js gzip 4.19 kB N/A -
turbopack-2z..x-oe.js gzip 4.19 kB N/A -
turbopack-2z.._2cn.js gzip 4.19 kB N/A -
turbopack-30..5pgu.js gzip 4.19 kB N/A -
turbopack-3c..zka7.js gzip 4.17 kB N/A -
turbopack-3q..w87f.js gzip 4.19 kB N/A -
turbopack-41..k4t0.js gzip 4.19 kB N/A -
turbopack-43..kpg1.js gzip 4.2 kB N/A -
089687r99-5_3.js gzip N/A 70.8 kB -
0arkbdqpxc37i.js gzip N/A 8.6 kB -
0ioow_tmvzxbf.js gzip N/A 160 B -
0tvekitj587fh.js gzip N/A 8.51 kB -
0z83a1om5rvtt.js gzip N/A 7.61 kB -
1-jqyfc89tixo.js gzip N/A 1.46 kB -
14t1kneseb8th.js gzip N/A 2.3 kB -
186o_9v4q6wvo.js gzip N/A 156 B -
192q2suy7rwb_.js gzip N/A 8.56 kB -
1ab2xruymo-oj.js gzip N/A 449 B -
1g64old_av12i.js gzip N/A 162 B -
1v0q1fw7v3roh.js gzip N/A 49.1 kB -
1wzrm0xjjbzn5.js gzip N/A 10.1 kB -
1xz2r9l20e-3a.js gzip N/A 154 B -
1z-ehckjr27om.js gzip N/A 156 B -
2368ic2ozqvf4.js gzip N/A 152 B -
25a1yz7zua29z.js gzip N/A 13.8 kB -
2f2bp_kexa37v.js gzip N/A 13.3 kB -
2i5v1taq97gql.js gzip N/A 8.59 kB -
2k_lzeilnqipg.js gzip N/A 158 B -
2k_ngfk54igk6.js gzip N/A 153 B -
2n3vh0w0tnb_2.js gzip N/A 8.52 kB -
2u_rpxq3tzytl.js gzip N/A 233 B -
2wfbykz1avdns.js gzip N/A 8.56 kB -
2xzzk6an46wqn.js gzip N/A 156 B -
32sifemopndov.js gzip N/A 10.4 kB -
368lim5wq0o0r.js gzip N/A 12.9 kB -
37eq851j9q6mo.js gzip N/A 154 B -
3de283pazbu99.js gzip N/A 9.81 kB -
3do8sy38i_qxd.js gzip N/A 158 B -
3drqjohogojbw.js gzip N/A 5.69 kB -
3dy48ip094dzs.js gzip N/A 65.5 kB -
3g8l1m2-o-ewi.js gzip N/A 13.1 kB -
3gp2o_v7jcw6s.js gzip N/A 8.57 kB -
3hqx7mbe-0y88.js gzip N/A 156 B -
3q6ng103a6hrv.js gzip N/A 167 B -
3qu7g1q2l_x2n.js gzip N/A 9.24 kB -
43j6fjudq0a3_.js gzip N/A 8.62 kB -
turbopack-02..3z3o.js gzip N/A 4.19 kB -
turbopack-06..dwwx.js gzip N/A 4.17 kB -
turbopack-0a..ouyp.js gzip N/A 4.19 kB -
turbopack-0g..wffw.js gzip N/A 4.19 kB -
turbopack-0j..oeej.js gzip N/A 4.19 kB -
turbopack-0l..0uik.js gzip N/A 4.2 kB -
turbopack-1g..agy-.js gzip N/A 4.19 kB -
turbopack-1n.._k1i.js gzip N/A 4.19 kB -
turbopack-1s..731r.js gzip N/A 4.19 kB -
turbopack-26..d_-r.js gzip N/A 4.19 kB -
turbopack-2u..rxmd.js gzip N/A 4.19 kB -
turbopack-3h..f3i2.js gzip N/A 4.19 kB -
turbopack-3m..ykcb.js gzip N/A 4.19 kB -
turbopack-44..-s4x.js gzip N/A 4.19 kB -
Total 465 kB 465 kB ⚠️ +55 B

Server

Middleware
Canary PR Change
middleware-b..fest.js gzip 716 B 721 B ✓
Total 716 B 721 B ⚠️ +5 B
Build Details
Build Manifests
Canary PR Change
_buildManifest.js gzip 435 B 434 B ✓
Total 435 B 434 B ✅ -1 B

📦 Webpack

Client

Main Bundles
Canary PR Change
2637-HASH.js gzip 4.63 kB N/A -
7724.HASH.js gzip 169 B N/A -
8274-HASH.js gzip 61.3 kB N/A -
8817-HASH.js gzip 5.59 kB N/A -
c3500254-HASH.js gzip 62.8 kB N/A -
framework-HASH.js gzip 59.7 kB 59.7 kB ✓
main-app-HASH.js gzip 254 B 255 B ✓
main-HASH.js gzip 39.4 kB 39.4 kB ✓
webpack-HASH.js gzip 1.68 kB 1.68 kB ✓
5887-HASH.js gzip N/A 5.61 kB -
6522-HASH.js gzip N/A 60.7 kB -
6779-HASH.js gzip N/A 4.63 kB -
8854.HASH.js gzip N/A 169 B -
eab920f9-HASH.js gzip N/A 62.8 kB -
Total 235 kB 235 kB ✅ -619 B
Polyfills
Canary PR Change
polyfills-HASH.js gzip 39.4 kB 39.4 kB ✓
Total 39.4 kB 39.4 kB ✓
Pages
Canary PR Change
_app-HASH.js gzip 193 B 193 B ✓
_error-HASH.js gzip 182 B 182 B ✓
css-HASH.js gzip 333 B 334 B ✓
dynamic-HASH.js gzip 1.81 kB 1.8 kB ✓
edge-ssr-HASH.js gzip 255 B 255 B ✓
head-HASH.js gzip 353 B 349 B 🟢 4 B (-1%)
hooks-HASH.js gzip 384 B 382 B ✓
image-HASH.js gzip 581 B 581 B ✓
index-HASH.js gzip 260 B 259 B ✓
link-HASH.js gzip 2.51 kB 2.51 kB ✓
routerDirect..HASH.js gzip 316 B 318 B ✓
script-HASH.js gzip 386 B 386 B ✓
withRouter-HASH.js gzip 313 B 314 B ✓
1afbb74e6ecf..834.css gzip 106 B 106 B ✓
Total 7.98 kB 7.97 kB ✅ -10 B

Server

Edge SSR
Canary PR Change
edge-ssr.js gzip 126 kB 126 kB ✓
page.js gzip 273 kB 272 kB ✓
Total 398 kB 398 kB ✅ -363 B
Middleware
Canary PR Change
middleware-b..fest.js gzip 618 B 618 B ✓
middleware-r..fest.js gzip 156 B 156 B ✓
middleware.js gzip 43.8 kB 44.3 kB 🔴 +544 B (+1%)
edge-runtime..pack.js gzip 842 B 842 B ✓
Total 45.4 kB 46 kB ⚠️ +544 B
Build Details
Build Manifests
Canary PR Change
_buildManifest.js gzip 721 B 720 B ✓
Total 721 B 720 B ✅ -1 B
Build Cache
Canary PR Change
0.pack gzip 4.37 MB 4.37 MB 🔴 +4.54 kB (+0%)
index.pack gzip 112 kB 113 kB 🔴 +1.32 kB (+1%)
index.pack.old gzip 115 kB 114 kB 🟢 1.34 kB (-1%)
Total 4.59 MB 4.6 MB ⚠️ +4.52 kB

🔄 Shared (bundler-independent)

Runtimes
Canary PR Change
app-page-exp...dev.js gzip 346 kB 346 kB ✓
app-page-exp..prod.js gzip 192 kB 192 kB ✓
app-page-tur...dev.js gzip 346 kB 346 kB ✓
app-page-tur..prod.js gzip 191 kB 191 kB ✓
app-page-tur...dev.js gzip 342 kB 342 kB ✓
app-page-tur..prod.js gzip 189 kB 189 kB ✓
app-page.run...dev.js gzip 343 kB 343 kB ✓
app-page.run..prod.js gzip 190 kB 190 kB ✓
app-route-ex...dev.js gzip 77 kB 77 kB ✓
app-route-ex..prod.js gzip 52.5 kB 52.5 kB ✓
app-route-tu...dev.js gzip 77.1 kB 77.1 kB ✓
app-route-tu..prod.js gzip 52.5 kB 52.5 kB ✓
app-route-tu...dev.js gzip 76.6 kB 76.6 kB ✓
app-route-tu..prod.js gzip 52.3 kB 52.3 kB ✓
app-route.ru...dev.js gzip 76.6 kB 76.6 kB ✓
app-route.ru..prod.js gzip 52.2 kB 52.2 kB ✓
dist_client_...dev.js gzip 324 B 324 B ✓
dist_client_...dev.js gzip 326 B 326 B ✓
dist_client_...dev.js gzip 318 B 318 B ✓
dist_client_...dev.js gzip 317 B 317 B ✓
pages-api-tu...dev.js gzip 43.9 kB 43.9 kB ✓
pages-api-tu..prod.js gzip 33.5 kB 33.5 kB ✓
pages-api.ru...dev.js gzip 43.9 kB 43.9 kB ✓
pages-api.ru..prod.js gzip 33.5 kB 33.5 kB ✓
pages-turbo....dev.js gzip 53.3 kB 53.3 kB ✓
pages-turbo...prod.js gzip 39.1 kB 39.1 kB ✓
pages.runtim...dev.js gzip 53.3 kB 53.3 kB ✓
pages.runtim..prod.js gzip 39.1 kB 39.1 kB ✓
server.runti..prod.js gzip 62.8 kB 62.8 kB ✓
Total 3.06 MB 3.06 MB ✅ -3 B
📎 Tarball URL 
https://vercel-packages.vercel.app/next/commits/8ff7671c670cea058cc2df26c03960c86afe7a15/next

@mmastrac mmastrac requested review from a team and bgw April 14, 2026 00:44
@mmastrac mmastrac merged commit 26b8758 into canary Apr 14, 2026
185 checks passed
@mmastrac mmastrac deleted the mmastrac/pin-artifact-actions branch April 14, 2026 01:22
@mmastrac mmastrac mentioned this pull request Apr 14, 2026
Open
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@bgw bgw bgw approved these changes

Assignees

No one assigned

Labels

created-by: Turbopack team PRs by the Turbopack team.

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@mmastrac @nextjs-bot @bgw