ci: bump the actions group across 1 directory with 3 updates

.github/workflows/ci.yml

@@ -73,7 +73,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 25
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Install Rust ${{ env.RUST_VERSION }} with all three targets
         uses: dtolnay/rust-toolchain@stable
@@ -148,7 +148,7 @@ jobs:
           - os: windows-latest
             name: Windows (x86_64)
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Install Rust ${{ env.RUST_VERSION }}
         uses: dtolnay/rust-toolchain@stable
@@ -247,7 +247,7 @@ jobs:
             name: Windows (x86_64)
             required: false
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Install Rust ${{ env.RUST_VERSION }}
         uses: dtolnay/rust-toolchain@stable
@@ -275,7 +275,7 @@ jobs:
       # The entire point. Without this a pixel diff is unreviewable.
       - name: Upload baseline / actual / diff images
         if: failure()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: golden-${{ runner.os }}
           path: .artifacts/golden
@@ -328,7 +328,7 @@ jobs:
             name: Windows (x86_64)
             slug: windows-x86_64
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Install Rust ${{ env.RUST_VERSION }}
         uses: dtolnay/rust-toolchain@stable
@@ -371,7 +371,7 @@ jobs:
           SCROZZ_STAMP: ${{ steps.commit.outputs.short }}
 
       - name: Upload ${{ matrix.slug }} artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: scrozz-${{ steps.commit.outputs.short }}-${{ matrix.slug }}
           path: dist/*

.github/workflows/performance.yml

@@ -25,7 +25,7 @@ jobs:
     runs-on: ${{ matrix.os }}
     timeout-minutes: 30
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - uses: dtolnay/rust-toolchain@stable
         with:
           toolchain: ${{ env.RUST_VERSION }}
@@ -38,7 +38,7 @@ jobs:
             tools/benchmark-capture-readiness.sh
             tools/benchmark-capture-readiness.sh --constrained
           } 2>&1 | tee capture-performance.txt
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@v7
         with:
           name: capture-performance-${{ matrix.os }}
           path: capture-performance.txt

.github/workflows/release.yml

@@ -98,7 +98,7 @@ jobs:
             echo "is_alpha=false" >>"$GITHUB_OUTPUT"
           fi
 
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           ref: ${{ format('refs/tags/{0}', steps.tag.outputs.tag) }}
           fetch-depth: 0
@@ -208,7 +208,7 @@ jobs:
           # on the difference between "it builds" and "it works".
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           ref: ${{ needs.resolve.outputs.sha }}
           persist-credentials: false
@@ -925,7 +925,7 @@ jobs:
 
       - name: Upload artefact
         if: matrix.os != 'windows-latest'
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: release-${{ matrix.slug }}
           path: |
@@ -937,7 +937,7 @@ jobs:
 
       - name: Upload Windows artifacts
         if: matrix.os == 'windows-latest'
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: release-${{ matrix.slug }}
           path: release-artifacts/*
@@ -956,12 +956,12 @@ jobs:
       # The one job that needs write access, and only for creating the release.
       contents: write
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           ref: ${{ needs.resolve.outputs.sha }}
           persist-credentials: false
 
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v8
         with:
           path: artifacts
           merge-multiple: true

.github/workflows/supply-chain.yml

@@ -38,7 +38,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 20
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Install Rust
         uses: dtolnay/rust-toolchain@stable