chore(deps): update actions/upload-artifact action to v7.0.1

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/upload-artifact	action	patch	v7.0.0 → v7.0.1

---

Release Notes

actions/upload-artifact (actions/upload-artifact)

v7.0.1

Compare Source

What's Changed

• Update the readme with direct upload details by @​danwkennedy in #​795
• Readme: bump all the example versions to v7 by @​danwkennedy in #​796
• Include changes in typespec/ts-http-runtime 0.3.5 by @​yacaovsnc in #​797

Full Changelog: actions/upload-artifact@v7...v7.0.1

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 6am on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[timoa]

🛑 DevSecOps Renovate sweep (TIM-117) — hard exclusion

This PR modifies .github/workflows/**, which the DevSecOps Renovate autopilot is hard-coded to never auto-merge. Workflow files are a privileged attack surface (supply-chain via pinned actions, permissions:, secrets:, with: injection).

Please review and merge manually if appropriate.

🤖 Automated by DevSecOps autopilot

[timoa]

DevSecOps autopilot (TIM-119) — flagged for human approval. This PR modifies .github/workflows/scorecard.yml, which is in the hard-exclusion list for this sweep. Diff is a minor bump of actions/upload-artifact to v7.0.1, low risk in itself, but any change to GitHub Actions workflow files gets a human gate per DevSecOps policy. Please review and merge manually if accepted.

[timoa]

Flagging for human approval — this PR touches .github/workflows/scorecard.yml (actions/upload-artifact v7.0.0 → v7.0.1). Renovate workflow files are on the hard-exclusion list for this autopilot; CI is green but I will not auto-merge changes under .github/workflows/**. Diff is a single-line uses: version bump. Please approve + squash after review.

[timoa]

Renovate PR — DevSecOps sweep (2026-08-14).

Hard exclusion: PR diff touches .github/workflows/scorecard.yml. Per sweep policy, any change to GitHub Actions workflow files requires human review and is never auto-merged.

CI green otherwise. Please review and merge manually if appropriate.

[timoa]

Renovate sweep — skipped, hard exclusion. Patch bump (actions/upload-artifact v7.0.0 → v7.0.1) but the diff touches .github/workflows/scorecard.yml — this is in the hard exclusion list (.github/workflows/**). CI is green but the autopilot policy never auto-merges workflow changes. Please review and merge manually, or close.