Bump the actions group across 1 directory with 5 updates

.github/workflows/bundle.yml

@@ -19,7 +19,7 @@ jobs:
     name: Notices and test data
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - name: Install Rust
         run: .github/scripts/install-rust.sh
       - uses: taiki-e/install-action@v2
@@ -28,7 +28,7 @@ jobs:
       - name: Generate
         working-directory: rust
         run: cargo about generate about.hbs -o ../THIRD-PARTY-NOTICES.txt
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@v7
         with:
           name: third-party-notices
           path: THIRD-PARTY-NOTICES.txt
@@ -38,7 +38,7 @@ jobs:
           manifest=$(cargo metadata --format-version 1 --locked --manifest-path rust/Cargo.toml |
             jq -r '.packages[] | select(.name == "las") | .manifest_path')
           cp -r "$(dirname "$manifest")/tests/data" test_data
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@v7
         with:
           name: test-data
           path: test_data
@@ -63,7 +63,7 @@ jobs:
           - { name: macos-arm64, os: macos-latest }
           - { name: macos-x64, os: macos-15-intel }
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - name: Install Rust
         run: .github/scripts/install-rust.sh
       - uses: Swatinem/rust-cache@v2
@@ -84,7 +84,7 @@ jobs:
           cmake --preset release -DLASRS_BUILD_TESTS=OFF -DLASRS_BUILD_EXAMPLES=OFF ${{ matrix.cmake-args }}
           cmake --build --preset release
           cmake --install build/release --prefix dist/lasrs-cpp
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v8
         with:
           name: third-party-notices
           path: dist/lasrs-cpp/share/lasrs
@@ -96,7 +96,7 @@ jobs:
             cmake --build build/package-$config
             ctest --test-dir build/package-$config --output-on-failure
           done
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@v7
         with:
           name: lasrs-cpp-${{ matrix.name }}
           path: dist/lasrs-cpp

.github/workflows/ci.yml

@@ -41,7 +41,7 @@ jobs:
       CC: ${{ matrix.config.cc }}
       CXX: ${{ matrix.config.cxx }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - name: Install Rust
         run: .github/scripts/install-rust.sh
       - uses: Swatinem/rust-cache@v2
@@ -71,7 +71,7 @@ jobs:
     name: Subproject
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - name: Install Rust
         run: .github/scripts/install-rust.sh
       - uses: Swatinem/rust-cache@v2
@@ -113,15 +113,15 @@ jobs:
         exclude:
           - { arch: arm64, image: "archlinux:latest" }
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - name: Install compiler
         id: deps
         run: bash .github/scripts/install-distro-deps.sh
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v8
         with:
           name: lasrs-cpp-linux-${{ matrix.arch }}
           path: bundle
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v8
         with:
           name: test-data
           path: test_data
@@ -153,7 +153,7 @@ jobs:
       ASAN_OPTIONS: detect_leaks=1:strict_string_checks=1
       UBSAN_OPTIONS: halt_on_error=1:print_stacktrace=1
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - name: Install Rust
         run: .github/scripts/install-rust.sh
       - uses: Swatinem/rust-cache@v2
@@ -175,7 +175,7 @@ jobs:
     name: Lint
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - name: Install Rust
         run: .github/scripts/install-rust.sh
       - uses: Swatinem/rust-cache@v2

.github/workflows/codeql.yml

@@ -27,8 +27,8 @@ jobs:
           - { language: rust, build-mode: none }
           - { language: actions, build-mode: none }
     steps:
-      - uses: actions/checkout@v4
-      - uses: github/codeql-action/init@v3
+      - uses: actions/checkout@v7
+      - uses: github/codeql-action/init@v4
         with:
           languages: ${{ matrix.language }}
           build-mode: ${{ matrix.build-mode }}
@@ -42,6 +42,6 @@ jobs:
         run: |
           cmake --preset release
           cmake --build --preset release
-      - uses: github/codeql-action/analyze@v3
+      - uses: github/codeql-action/analyze@v4
         with:
           category: /language:${{ matrix.language }}

.github/workflows/release.yml

@@ -18,7 +18,7 @@ jobs:
     name: Check version and changelog
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - name: Tag matches the project versions
         run: |
           version=${GITHUB_REF_NAME#v}
@@ -48,8 +48,8 @@ jobs:
       id-token: write
       attestations: write
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/download-artifact@v4
+      - uses: actions/checkout@v7
+      - uses: actions/download-artifact@v8
         with:
           pattern: lasrs-cpp-*
           path: dist
@@ -68,7 +68,7 @@ jobs:
             fi
           done
           sha256sum *.zip *.tar.gz > SHA256SUMS.txt
-      - uses: actions/attest-build-provenance@v2
+      - uses: actions/attest-build-provenance@v4
         with:
           subject-path: |
             dist/*.zip