ci: update GitHub Actions to latest versions

Bump versions in all workflow files for improved reliability and
security.

- actions/checkout to v6,
- actions/upload-artifact to v7,
- tj-actions/changed-files to v47, and
- EndBug/add-and-commit to v10

Author: johanvx

.github/workflows/release.yml

@@ -10,7 +10,7 @@ jobs:
       contents: write
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
           fetch-tags: true
@@ -23,7 +23,7 @@ jobs:
       - name: Build PDF with PDF/UA-1
         run: typst compile --pdf-standard ua-1 undergradmath.typ
       - name: Upload PDF as artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: Undergradmath
           path: undergradmath.pdf

.github/workflows/tag.yml

@@ -13,7 +13,7 @@ jobs:
       version: ${{ steps.output-version.outputs.version }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
           fetch-tags: true
@@ -30,7 +30,7 @@ jobs:
           git rev-list -n 1 "tags/${{ steps.check-tag.outputs.previous_tag }}" >> $GITHUB_OUTPUT
       - name: Check changed files
         id: changed-files
-        uses: tj-actions/changed-files@v46
+        uses: tj-actions/changed-files@v47
         with:
           base_sha: ${{ steps.get-base.outputs.base }}
       - name: Output the version
@@ -52,7 +52,7 @@ jobs:
       contents: write
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
           fetch-tags: true
@@ -67,7 +67,7 @@ jobs:
           git cliff -vv -t ${{ needs.check-version.outputs.version }} -o CHANGELOG.md
       - name: Add changelog and commit
         id: add-changelog
-        uses: EndBug/add-and-commit@v9
+        uses: EndBug/add-and-commit@v10
         with:
           add: 'CHANGELOG.md'
           author_name: github-actions[bot]

.github/workflows/watch.yml

@@ -11,10 +11,10 @@ jobs:
       modified: ${{ contains(steps.changed-files.outputs.modified_files, 'undergradmath.typ') }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
       - name: Check changed files
         id: changed-files
-        uses: tj-actions/changed-files@v46
+        uses: tj-actions/changed-files@v47
       - name: List all modified files
         run: |
           echo "List all the files that have been modified: ${{ steps.changed-files.outputs.modified_files }}"
@@ -24,7 +24,7 @@ jobs:
     if: needs.check-changed.outputs.modified == 'true'
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
       - name: Update Homebrew
         run: brew update
       - name: Install Typst
@@ -34,7 +34,7 @@ jobs:
       - name: Build PDF with PDF/UA-1
         run: typst compile --pdf-standard ua-1 undergradmath.typ
       - name: Upload PDF as artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: Undergradmath
           path: undergradmath.pdf