chore(deps): bump actions/upload-artifact from 4 to 7

.github/workflows/benchmarks.yml

@@ -71,7 +71,7 @@ jobs:
 
     - name: Upload criterion output
       if: always()
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@v7
       with:
         name: criterion-output
         path: target/criterion/

.github/workflows/compliance.yml

@@ -54,7 +54,7 @@ jobs:
         rivet-version: v0.3.0
 
     - name: Upload archive
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@v7
       with:
         name: compliance-report
         path: ${{ steps.report.outputs.archive-path }}

.github/workflows/fuzz.yml

@@ -74,7 +74,7 @@ jobs:
 
       - name: Upload crash artifacts
         if: always()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: fuzz-artifacts-${{ matrix.target }}
           path: fuzz/artifacts/${{ matrix.target }}/
@@ -83,7 +83,7 @@ jobs:
 
       - name: Upload corpus
         if: always()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: fuzz-corpus-${{ matrix.target }}
           path: fuzz/corpus/${{ matrix.target }}/

.github/workflows/memory-profile.yml

@@ -64,7 +64,7 @@ jobs:
 
     - name: Upload profiling data
       if: success() || failure()
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@v7
       with:
         name: bytehound-profiles
         path: memory-profiling_*.dat
@@ -219,7 +219,7 @@ jobs:
 
     - name: Upload summaries
       if: success() || failure()
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@v7
       with:
         name: bytehound-summaries
         path: |

.github/workflows/release.yml

@@ -43,7 +43,7 @@ jobs:
         # fetch-reports can auto-generate data/sigil/{stats,artifacts}.json.
         include-data-formats: true
 
-    - uses: actions/upload-artifact@v4
+    - uses: actions/upload-artifact@v7
       with:
         name: compliance-report
         path: ${{ steps.report.outputs.archive-path }}
@@ -127,7 +127,7 @@ jobs:
     # SHA256SUMS.txt covering every asset — matches the synth release flow.
 
     - name: Upload artifact
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@v7
       with:
         name: ${{ matrix.asset_name }}
         path: artifacts/*

.github/workflows/rust.yml

@@ -136,7 +136,7 @@ jobs:
 
     - name: Upload Build Artifacts (Bazel)
       if: matrix.build-system == 'bazel'
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@v7
       with:
         name: bazel-outputs-${{ matrix.os }}
         path: |
@@ -242,7 +242,7 @@ jobs:
         echo "Verified keyless signature"
 
     - name: Upload artifacts
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@v7
       with:
         name: signed-wasm-artifacts
         path: |
@@ -276,7 +276,7 @@ jobs:
 
     - name: Upload Rekor Data (on failure)
       if: failure()
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@v7
       with:
         name: rekor-fresh-data
         path: rekor-data.txt
@@ -307,7 +307,7 @@ jobs:
       env:
         CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
     - name: Upload HTML coverage report
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@v7
       with:
         name: coverage-html
         path: coverage-html/

.github/workflows/supply-chain.yml

@@ -137,7 +137,7 @@ jobs:
         echo "All mutants killed!"
     - name: Upload mutants reports
       if: always()
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@v7
       with:
         name: mutants-reports
         path: |

.github/workflows/wasm-signing.yml

@@ -79,7 +79,7 @@ jobs:
           -i "${{ steps.sign.outputs.signed_path }}"
 
     - name: Upload signed WASM
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@v7
       with:
         name: signed-wasm-${{ github.sha }}
         path: ${{ steps.sign.outputs.signed_path }}
@@ -116,7 +116,7 @@ jobs:
       run: wsc bundle inspect -i trust-bundle-${{ github.ref_name }}.json
 
     - name: Upload trust bundle
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@v7
       with:
         name: trust-bundle-${{ github.ref_name }}
         path: |