build(deps): bump the actions group with 4 updates (#277)

dependabot[bot] · web-flow · commit 182900b86d35 · 2026-03-08T23:37:07.000-04:00
Bumps the actions group with 4 updates: [actions/upload-artifact](https://github.com/actions/upload-artifact), [actions/download-artifact](https://github.com/actions/download-artifact), [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) and [PyO3/maturin-action](https://github.com/pyo3/maturin-action). Updates `actions/upload-artifact` from 6 to 7 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/upload-artifact/releases">actions/upload-artifact's releases</a>.</em></p> <blockquote> <h2>v7.0.0</h2> <h2>v7 What's new</h2> <h3>Direct Uploads</h3> <p>Adds support for uploading single files directly (unzipped). Callers can set the new <code>archive</code> parameter to <code>false</code> to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The <code>name</code> parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.</p> <h3>ESM</h3> <p>To support new versions of the <code>@actions/*</code> packages, we've upgraded the package to ESM.</p> <h2>What's Changed</h2> <ul> <li>Add proxy integration test by <a href="https://github.com/Link"><code>@​Link</code></a>- in <a href="https://redirect.github.com/actions/upload-artifact/pull/754">actions/upload-artifact#754</a></li> <li>Upgrade the module to ESM and bump dependencies by <a href="https://github.com/danwkennedy"><code>@​danwkennedy</code></a> in <a href="https://redirect.github.com/actions/upload-artifact/pull/762">actions/upload-artifact#762</a></li> <li>Support direct file uploads by <a href="https://github.com/danwkennedy"><code>@​danwkennedy</code></a> in <a href="https://redirect.github.com/actions/upload-artifact/pull/764">actions/upload-artifact#764</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/Link"><code>@​Link</code></a>- made their first contribution in <a href="https://redirect.github.com/actions/upload-artifact/pull/754">actions/upload-artifact#754</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/upload-artifact/compare/v6...v7.0.0">https://github.com/actions/upload-artifact/compare/v6...v7.0.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/upload-artifact/commit/bbbca2ddaa5d8feaa63e36b76fdaad77386f024f"><code>bbbca2d</code></a> Support direct file uploads (<a href="https://redirect.github.com/actions/upload-artifact/issues/764">#764</a>)</li> <li><a href="https://github.com/actions/upload-artifact/commit/589182c5a4cec8920b8c1bce3e2fab1c97a02296"><code>589182c</code></a> Upgrade the module to ESM and bump dependencies (<a href="https://redirect.github.com/actions/upload-artifact/issues/762">#762</a>)</li> <li><a href="https://github.com/actions/upload-artifact/commit/47309c993abb98030a35d55ef7ff34b7fa1074b5"><code>47309c9</code></a> Merge pull request <a href="https://redirect.github.com/actions/upload-artifact/issues/754">#754</a> from actions/Link-/add-proxy-integration-tests</li> <li><a href="https://github.com/actions/upload-artifact/commit/02a8460834e70dab0ce194c64360c59dc1475ef0"><code>02a8460</code></a> Add proxy integration test</li> <li>See full diff in <a href="https://github.com/actions/upload-artifact/compare/v6...v7">compare view</a></li> </ul> </details> <br /> Updates `actions/download-artifact` from 7 to 8 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/download-artifact/releases">actions/download-artifact's releases</a>.</em></p> <blockquote> <h2>v8.0.0</h2> <h2>v8 - What's new</h2> <h3>Direct downloads</h3> <p>To support direct uploads in <code>actions/upload-artifact</code>, the action will no longer attempt to unzip all downloaded files. Instead, the action checks the <code>Content-Type</code> header ahead of unzipping and skips non-zipped files. Callers wishing to download a zipped file as-is can also set the new <code>skip-decompress</code> parameter to <code>false</code>.</p> <h3>Enforced checks (breaking)</h3> <p>A previous release introduced digest checks on the download. If a download hash didn't match the expected hash from the server, the action would log a warning. Callers can now configure the behavior on mismatch with the <code>digest-mismatch</code> parameter. To be secure by default, we are now defaulting the behavior to <code>error</code> which will fail the workflow run.</p> <h3>ESM</h3> <p>To support new versions of the @actions/* packages, we've upgraded the package to ESM.</p> <h2>What's Changed</h2> <ul> <li>Don't attempt to un-zip non-zipped downloads by <a href="https://github.com/danwkennedy"><code>@​danwkennedy</code></a> in <a href="https://redirect.github.com/actions/download-artifact/pull/460">actions/download-artifact#460</a></li> <li>Add a setting to specify what to do on hash mismatch and default it to <code>error</code> by <a href="https://github.com/danwkennedy"><code>@​danwkennedy</code></a> in <a href="https://redirect.github.com/actions/download-artifact/pull/461">actions/download-artifact#461</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/download-artifact/compare/v7...v8.0.0">https://github.com/actions/download-artifact/compare/v7...v8.0.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/download-artifact/commit/70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3"><code>70fc10c</code></a> Merge pull request <a href="https://redirect.github.com/actions/download-artifact/issues/461">#461</a> from actions/danwkennedy/digest-mismatch-behavior</li> <li><a href="https://github.com/actions/download-artifact/commit/f258da9a506b755b84a09a531814700b86ccfc62"><code>f258da9</code></a> Add change docs</li> <li><a href="https://github.com/actions/download-artifact/commit/ccc058e5fbb0bb2352213eaec3491e117cbc4a5c"><code>ccc058e</code></a> Fix linting issues</li> <li><a href="https://github.com/actions/download-artifact/commit/bd7976ba57ecea96e6f3df575eb922d11a12a9fd"><code>bd7976b</code></a> Add a setting to specify what to do on hash mismatch and default it to <code>error</code></li> <li><a href="https://github.com/actions/download-artifact/commit/ac21fcf45e0aaee541c0f7030558bdad38d77d6c"><code>ac21fcf</code></a> Merge pull request <a href="https://redirect.github.com/actions/download-artifact/issues/460">#460</a> from actions/danwkennedy/download-no-unzip</li> <li><a href="https://github.com/actions/download-artifact/commit/15999bff51058bc7c19b50ebbba518eaef7c26c0"><code>15999bf</code></a> Add note about package bumps</li> <li><a href="https://github.com/actions/download-artifact/commit/974686ed5098c7f9c9289ec946b9058e496a2561"><code>974686e</code></a> Bump the version to <code>v8</code> and add release notes</li> <li><a href="https://github.com/actions/download-artifact/commit/fbe48b1d2756394be4cd4358ed3bc1343b330e75"><code>fbe48b1</code></a> Update test names to make it clearer what they do</li> <li><a href="https://github.com/actions/download-artifact/commit/96bf374a614d4360e225874c3efd6893a3f285e7"><code>96bf374</code></a> One more test fix</li> <li><a href="https://github.com/actions/download-artifact/commit/b8c4819ef592cbe04fd93534534b38f853864332"><code>b8c4819</code></a> Fix skip decompress test</li> <li>Additional commits viewable in <a href="https://github.com/actions/download-artifact/compare/v7...v8">compare view</a></li> </ul> </details> <br /> Updates `astral-sh/setup-uv` from 7.3.0 to 7.3.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/astral-sh/setup-uv/releases">astral-sh/setup-uv's releases</a>.</em></p> <blockquote> <h2>v7.3.1 🌈 fall back to VERSION_CODENAME when VERSION_ID is not available</h2> <h2>Changes</h2> <p>This release adds support for running in containers like <code>debian:testing</code> or <code>debian:unstable</code></p> <h2>🐛 Bug fixes</h2> <ul> <li>fix: fall back to VERSION_CODENAME when VERSION_ID is not available <a href="https://github.com/eifinger-bot"><code>@​eifinger-bot</code></a> (<a href="https://redirect.github.com/astral-sh/setup-uv/issues/774">#774</a>)</li> </ul> <h2>🧰 Maintenance</h2> <ul> <li>chore: update known checksums for 0.10.6 @<a href="https://github.com/apps/github-actions">github-actions[bot]</a> (<a href="https://redirect.github.com/astral-sh/setup-uv/issues/771">#771</a>)</li> <li>chore: update known checksums for 0.10.5 @<a href="https://github.com/apps/github-actions">github-actions[bot]</a> (<a href="https://redirect.github.com/astral-sh/setup-uv/issues/770">#770</a>)</li> <li>chore: update known checksums for 0.10.4 @<a href="https://github.com/apps/github-actions">github-actions[bot]</a> (<a href="https://redirect.github.com/astral-sh/setup-uv/issues/768">#768</a>)</li> <li>chore: update known checksums for 0.10.3 @<a href="https://github.com/apps/github-actions">github-actions[bot]</a> (<a href="https://redirect.github.com/astral-sh/setup-uv/issues/767">#767</a>)</li> <li>chore: update known checksums for 0.10.2 @<a href="https://github.com/apps/github-actions">github-actions[bot]</a> (<a href="https://redirect.github.com/astral-sh/setup-uv/issues/765">#765</a>)</li> <li>chore: update known checksums for 0.10.1 @<a href="https://github.com/apps/github-actions">github-actions[bot]</a> (<a href="https://redirect.github.com/astral-sh/setup-uv/issues/764">#764</a>)</li> </ul> <h2>⬆️ Dependency updates</h2> <ul> <li>Bump github/codeql-action from 4.31.9 to 4.32.2 @<a href="https://github.com/apps/dependabot">dependabot[bot]</a> (<a href="https://redirect.github.com/astral-sh/setup-uv/issues/766">#766</a>)</li> <li>Bump zizmorcore/zizmor-action from 0.4.1 to 0.5.0 @<a href="https://github.com/apps/dependabot">dependabot[bot]</a> (<a href="https://redirect.github.com/astral-sh/setup-uv/issues/763">#763</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/astral-sh/setup-uv/commit/5a095e7a2014a4212f075830d4f7277575a9d098"><code>5a095e7</code></a> Bump github/codeql-action from 4.31.9 to 4.32.2 (<a href="https://redirect.github.com/astral-sh/setup-uv/issues/766">#766</a>)</li> <li><a href="https://github.com/astral-sh/setup-uv/commit/b12532f27f2f9c4460049b29dd0ad8c3a3d8f93c"><code>b12532f</code></a> fix: fall back to VERSION_CODENAME when VERSION_ID is not available (<a href="https://redirect.github.com/astral-sh/setup-uv/issues/774">#774</a>)</li> <li><a href="https://github.com/astral-sh/setup-uv/commit/0098a7571ce5c86752e28c0868b41650866a8f4c"><code>0098a75</code></a> chore: update known checksums for 0.10.6 (<a href="https://redirect.github.com/astral-sh/setup-uv/issues/771">#771</a>)</li> <li><a href="https://github.com/astral-sh/setup-uv/commit/2e7ed0e2bb3523ea417fa281f54c8d3a39f96e75"><code>2e7ed0e</code></a> chore: update known checksums for 0.10.5 (<a href="https://redirect.github.com/astral-sh/setup-uv/issues/770">#770</a>)</li> <li><a href="https://github.com/astral-sh/setup-uv/commit/04224aa8caab79e9c08d41c1ef06d6394aafe6a0"><code>04224aa</code></a> chore: update known checksums for 0.10.4 (<a href="https://redirect.github.com/astral-sh/setup-uv/issues/768">#768</a>)</li> <li><a href="https://github.com/astral-sh/setup-uv/commit/2bc602ff898ad0e7220b651a4a0f450b5ba2cd40"><code>2bc602f</code></a> chore: update known checksums for 0.10.3 (<a href="https://redirect.github.com/astral-sh/setup-uv/issues/767">#767</a>)</li> <li><a href="https://github.com/astral-sh/setup-uv/commit/dd9d748439ebdfa6b3a3ff28bac088d074755740"><code>dd9d748</code></a> chore: update known checksums for 0.10.2 (<a href="https://redirect.github.com/astral-sh/setup-uv/issues/765">#765</a>)</li> <li><a href="https://github.com/astral-sh/setup-uv/commit/14eede1834c1e02d069cd925692dd1fd2373e30e"><code>14eede1</code></a> chore: update known checksums for 0.10.1 (<a href="https://redirect.github.com/astral-sh/setup-uv/issues/764">#764</a>)</li> <li><a href="https://github.com/astral-sh/setup-uv/commit/c452423b2c42b215b0b2c5c6f98322aaea91c771"><code>c452423</code></a> Bump zizmorcore/zizmor-action from 0.4.1 to 0.5.0 (<a href="https://redirect.github.com/astral-sh/setup-uv/issues/763">#763</a>)</li> <li>See full diff in <a href="https://github.com/astral-sh/setup-uv/compare/eac588ad8def6316056a12d4907a9d4d84ff7a3b...5a095e7a2014a4212f075830d4f7277575a9d098">compare view</a></li> </ul> </details> <br /> Updates `PyO3/maturin-action` from 1.50.0 to 1.50.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/pyo3/maturin-action/releases">PyO3/maturin-action's releases</a>.</em></p> <blockquote> <h2>v1.50.1</h2> <h2>What's Changed</h2> <ul> <li>Remove ziglang bound by <a href="https://github.com/konstin"><code>@​konstin</code></a> in <a href="https://redirect.github.com/PyO3/maturin-action/pull/418">PyO3/maturin-action#418</a></li> <li>Try reactivating Windows ARM by <a href="https://github.com/konstin"><code>@​konstin</code></a> in <a href="https://redirect.github.com/PyO3/maturin-action/pull/419">PyO3/maturin-action#419</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/PyO3/maturin-action/compare/v1...v1.50.1">https://github.com/PyO3/maturin-action/compare/v1...v1.50.1</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/PyO3/maturin-action/commit/04ac600d27cdf7a9a280dadf7147097c42b757ad"><code>04ac600</code></a> Bump version to v1.50.1</li> <li><a href="https://github.com/PyO3/maturin-action/commit/e37e22d8060a5a52f11b78bec06c4157dfff8150"><code>e37e22d</code></a> Fix riscv64 musl docker image tag naming</li> <li><a href="https://github.com/PyO3/maturin-action/commit/6d51287663ae4f10bf0d84cd8f9579b15d11425e"><code>6d51287</code></a> Update versions-manifest.json (<a href="https://redirect.github.com/pyo3/maturin-action/issues/422">#422</a>)</li> <li><a href="https://github.com/PyO3/maturin-action/commit/78e90b064177c51bc09b70b391c48bb558898810"><code>78e90b0</code></a> Add arm64 support in generate-versions-manifest.py</li> <li><a href="https://github.com/PyO3/maturin-action/commit/48c1d48d1c86ae2b26215d6a954e0cd328d32442"><code>48c1d48</code></a> Revert &quot;Update versions-manifest.json (<a href="https://redirect.github.com/pyo3/maturin-action/issues/420">#420</a>)&quot; (<a href="https://redirect.github.com/pyo3/maturin-action/issues/421">#421</a>)</li> <li><a href="https://github.com/PyO3/maturin-action/commit/63daa2eebd886519d67e725e250546a75fdb1646"><code>63daa2e</code></a> Update versions-manifest.json (<a href="https://redirect.github.com/pyo3/maturin-action/issues/420">#420</a>)</li> <li><a href="https://github.com/PyO3/maturin-action/commit/44f102c4b94ab05071a9e354229cba98226c14e5"><code>44f102c</code></a> Try reactivating Windows ARM (<a href="https://redirect.github.com/pyo3/maturin-action/issues/419">#419</a>)</li> <li><a href="https://github.com/PyO3/maturin-action/commit/204351f0e594407086f027fc26fef8a6cf294f61"><code>204351f</code></a> Remove ziglang bound (<a href="https://redirect.github.com/pyo3/maturin-action/issues/418">#418</a>)</li> <li><a href="https://github.com/PyO3/maturin-action/commit/a17783c5570aa2ab7bc5c6c4c1a7dd68249f8767"><code>a17783c</code></a> Bump minimatch (<a href="https://redirect.github.com/pyo3/maturin-action/issues/417">#417</a>)</li> <li><a href="https://github.com/PyO3/maturin-action/commit/6d0737c14657950f77de02babe1951b6241bf5fa"><code>6d0737c</code></a> Update versions-manifest.json (<a href="https://redirect.github.com/pyo3/maturin-action/issues/416">#416</a>)</li> <li>Additional commits viewable in <a href="https://github.com/pyo3/maturin-action/compare/b1bd829e37fef14c63f19162034228a2f3dc1021...04ac600d27cdf7a9a280dadf7147097c42b757ad">compare view</a></li> </ul> </details> <br /> --- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
diff --git a/.github/workflows/benchmark.yml b/.github/workflows/benchmark.yml
@@ -63,7 +63,7 @@ jobs:
       - run: cargo build --bin cpp-linter --release
         if: steps.cache.outputs.cache-hit != 'true' || steps.validate.outputs.cache-valid == 'false'
       - name: Upload build artifact
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: ${{ matrix.name }}
           path: ${{ env.BIN }}
@@ -90,7 +90,7 @@ jobs:
   #           yum update -y
   #           yum install -y openssl openssl-devel
   #     - name: Upload wheels
-  #       uses: actions/upload-artifact@v6
+  #       uses: actions/upload-artifact@v7
   #       with:
   #         name: wheel
   #         path: dist/cpp_linter-*-cp3*-abi3-*.whl
@@ -113,7 +113,7 @@ jobs:
           persist-credentials: false
 
       - name: Download built binaries
-        uses: actions/download-artifact@v7
+        uses: actions/download-artifact@v8
 
       - name: Install cargo-binstall
         uses: cargo-bins/cargo-binstall@ea60fcf749c6a52a729e0eaabb5eb33391d44823 # v1.16.4
@@ -126,7 +126,7 @@ jobs:
       - name: Install nushell
         uses: hustcer/setup-nu@920172d92eb04671776f3ba69d605d3b09351c30 # v3.22
       - name: Install uv
-        uses: astral-sh/setup-uv@eac588ad8def6316056a12d4907a9d4d84ff7a3b # v7.3.0
+        uses: astral-sh/setup-uv@5a095e7a2014a4212f075830d4f7277575a9d098 # v7.3.1
 
       - name: Run benchmark script
         working-directory: benchmark
diff --git a/.github/workflows/binary-builds.yml b/.github/workflows/binary-builds.yml
@@ -153,7 +153,7 @@ jobs:
           tar -a -c -v -f "${arc_name}" ${tgt} LICENSE
 
       - name: Upload artifacts
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: cpp-linter-${{ matrix.target }}
           path: cpp-linter-${{ matrix.target }}*
@@ -176,7 +176,7 @@ jobs:
         with:
           python-version: 3.x
       - name: Download built assets
-        uses: actions/download-artifact@v7
+        uses: actions/download-artifact@v8
         with:
           pattern: cpp-linter-*
           path: dist
diff --git a/.github/workflows/build-docs.yml b/.github/workflows/build-docs.yml
@@ -57,7 +57,7 @@ jobs:
           path: ~/.cargo
           key: ${{ runner.os }}-docs-cargo-${{ hashFiles('Cargo.lock') }}
       - name: Install uv
-        uses: astral-sh/setup-uv@eac588ad8def6316056a12d4907a9d4d84ff7a3b # v7.3.0
+        uses: astral-sh/setup-uv@5a095e7a2014a4212f075830d4f7277575a9d098 # v7.3.1
       - name: Install cargo-binstall
         uses: cargo-bins/cargo-binstall@ea60fcf749c6a52a729e0eaabb5eb33391d44823 # v1.16.4
         env:
@@ -88,7 +88,7 @@ jobs:
           path: ~/.cargo
           key: ${{ runner.os }}-docs-cargo-${{ hashFiles('Cargo.lock') }}
       - name: Install uv
-        uses: astral-sh/setup-uv@eac588ad8def6316056a12d4907a9d4d84ff7a3b # v7.3.0
+        uses: astral-sh/setup-uv@5a095e7a2014a4212f075830d4f7277575a9d098 # v7.3.1
       - name: Install cargo-binstall
         uses: cargo-bins/cargo-binstall@ea60fcf749c6a52a729e0eaabb5eb33391d44823 # v1.16.4
         env:
@@ -99,7 +99,7 @@ jobs:
           GITHUB_TOKEN: ${{ github.token }}
       - run: nur docs rs
       - name: upload rustdoc build as artifact
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           path: target/doc
           name: cpp-linter-api_docs
diff --git a/.github/workflows/node-js-packaging.yml b/.github/workflows/node-js-packaging.yml
@@ -125,7 +125,7 @@ jobs:
         run: ${{ matrix.settings.build }}
         shell: bash
       - name: Upload artifact
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: bindings-${{ matrix.settings.target }}
           path: |
@@ -175,7 +175,7 @@ jobs:
             rm -rf target
             rm -rf .yarn/cache
       - name: Upload artifact
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: bindings-freebsd
           path: bindings/node/${{ env.APP_NAME }}.*.node
@@ -217,7 +217,7 @@ jobs:
       - name: Install dependencies
         run: yarn install
       - name: Download artifacts
-        uses: actions/download-artifact@v7
+        uses: actions/download-artifact@v8
         with:
           name: bindings-${{ matrix.settings.target }}
           path: bindings/node
@@ -277,7 +277,7 @@ jobs:
           yarn config set --json supportedArchitectures.libc '["current", "musl", "gnu"]'
           yarn install
       - name: Download artifacts
-        uses: actions/download-artifact@v7
+        uses: actions/download-artifact@v8
         with:
           name: bindings-${{ matrix.target }}
           path: bindings/node
@@ -330,7 +330,7 @@ jobs:
         working-directory: bindings/node
         run: yarn napi create-npm-dirs
       - name: Download all artifacts
-        uses: actions/download-artifact@v7
+        uses: actions/download-artifact@v8
         with:
           path: bindings/node/artifacts
       - name: Move artifacts
diff --git a/.github/workflows/python-packaging.yml b/.github/workflows/python-packaging.yml
@@ -79,7 +79,7 @@ jobs:
           fi
 
       - name: Build wheels
-        uses: PyO3/maturin-action@b1bd829e37fef14c63f19162034228a2f3dc1021 # v1.50.0
+        uses: PyO3/maturin-action@04ac600d27cdf7a9a280dadf7147097c42b757ad # v1.50.1
         with:
           target: ${{ matrix.platform.target }}
           args: --release --out dist --find-interpreter ${{ steps.is-openssl-vendored.outputs.enabled }}
@@ -99,7 +99,7 @@ jobs:
                 ;;
             esac
       - name: Upload wheels
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: wheels-linux-${{ matrix.platform.target }}
           path: dist/*
@@ -122,13 +122,13 @@ jobs:
           python-version: '3.x'
           architecture: ${{ matrix.platform.target }}
       - name: Build wheels
-        uses: PyO3/maturin-action@b1bd829e37fef14c63f19162034228a2f3dc1021 # v1.50.0
+        uses: PyO3/maturin-action@04ac600d27cdf7a9a280dadf7147097c42b757ad # v1.50.1
         with:
           target: ${{ matrix.platform.target }}
           args: --release --out dist --find-interpreter
           sccache: ${{ !startsWith(github.ref, 'refs/tags/') }} # zizmor: ignore[cache-poisoning]
       - name: Upload wheels
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: wheels-windows-${{ matrix.platform.target }}
           path: dist/*
@@ -151,13 +151,13 @@ jobs:
         with:
           python-version: '3.x'
       - name: Build wheels
-        uses: PyO3/maturin-action@b1bd829e37fef14c63f19162034228a2f3dc1021 # v1.50.0
+        uses: PyO3/maturin-action@04ac600d27cdf7a9a280dadf7147097c42b757ad # v1.50.1
         with:
           target: ${{ matrix.platform.target }}
           args: --release --out dist --find-interpreter --features openssl-vendored
           sccache: ${{ !startsWith(github.ref, 'refs/tags/') }} # zizmor: ignore[cache-poisoning]
       - name: Upload wheels
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: wheels-macos-${{ matrix.platform.target }}
           path: dist/*
@@ -172,12 +172,12 @@ jobs:
         with:
           python-version: 3.x
       - name: Build sdist
-        uses: PyO3/maturin-action@b1bd829e37fef14c63f19162034228a2f3dc1021 # v1.50.0
+        uses: PyO3/maturin-action@04ac600d27cdf7a9a280dadf7147097c42b757ad # v1.50.1
         with:
           command: sdist
           args: --out dist
       - name: Upload sdist
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: wheels-sdist
           path: dist/*
@@ -189,7 +189,7 @@ jobs:
     permissions:
       id-token: write
     steps:
-      - uses: actions/download-artifact@v7
+      - uses: actions/download-artifact@v8
         with:
           pattern: wheels-*
           path: dist
diff --git a/.github/workflows/run-dev-tests.yml b/.github/workflows/run-dev-tests.yml
@@ -69,7 +69,7 @@ jobs:
           python-version: 3.x
 
       - name: Install uv
-        uses: astral-sh/setup-uv@eac588ad8def6316056a12d4907a9d4d84ff7a3b # v7.3.0
+        uses: astral-sh/setup-uv@5a095e7a2014a4212f075830d4f7277575a9d098 # v7.3.1
         with:
           enable-cache: true
           cache-dependency-glob: "uv.lock"
@@ -217,7 +217,7 @@ jobs:
         run: nur test llvm-cov
 
       - name: Upload coverage data
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: HTML_report-${{ runner.os }}
           path: target/llvm-cov/html
