build(deps): Bump actions/upload-artifact from 4 to 7

.github/workflows/bench.yml

@@ -20,7 +20,7 @@ jobs:
         run: PYTHONPATH=python python3 -m cos bench --mock --suite truthfulqa,triviaqa,mmlu --output-dir benchmarks/results_ci
       - name: σ-bench CI (regression vs previous)
         run: PYTHONPATH=python python3 -m cos bench --ci --mock --suite truthfulqa,triviaqa,mmlu --output-dir benchmarks/results_ci
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@v7
         with:
           name: bench-receipts
           path: benchmarks/results_ci/

.github/workflows/ci.yml

@@ -80,7 +80,7 @@ jobs:
       - name: Generate sbom/creation-os.cdx.json (reproducible + dev extra)
         run: bash scripts/sbom/generate_creation_os_cdx.sh
       - name: Upload SBOM artifacts
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: sbom
           path: |

.github/workflows/publish.yml

@@ -23,7 +23,7 @@ jobs:
         run: pip install --upgrade pip build
       - name: Build
         run: python -m build
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@v7
         with:
           name: dist
           path: dist/

.github/workflows/pypi-semantic-release.yml

@@ -46,7 +46,7 @@ jobs:
 
       - name: Upload sdist and wheel
         if: steps.psr.outputs.released == 'true'
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: python-dist
           path: dist/

.github/workflows/pypi.yml

@@ -24,7 +24,7 @@ jobs:
           python-version: "3.11"
       - run: pip install build
       - run: python -m build
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@v7
         with:
           name: dist
           path: dist/

.github/workflows/release.yml

@@ -45,7 +45,7 @@ jobs:
         run: |
           cd dist
           tar czf ../creation-os-${GITHUB_REF_NAME}-macos-universal.tar.gz cos creation_os_server creation_os
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@v7
         with:
           name: creation-os-macos-universal
           path: creation-os-*-macos-universal.tar.gz
@@ -73,7 +73,7 @@ jobs:
         run: |
           cd dist
           tar czf ../creation-os-${GITHUB_REF_NAME}-linux-${{ matrix.arch }}.tar.gz cos creation_os_server creation_os
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@v7
         with:
           name: creation-os-linux-${{ matrix.arch }}
           path: creation-os-*-linux-*.tar.gz
@@ -99,7 +99,7 @@ jobs:
         run: |
           cd dist
           tar czf ../creation-os-${GITHUB_REF_NAME}-linux-cos-amd64.tar.gz cos cos-demo
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@v7
         with:
           name: creation-os-linux-cos-amd64
           path: creation-os-*-linux-cos-amd64.tar.gz

.github/workflows/scorecard.yml

@@ -26,7 +26,7 @@ jobs:
           results_format: sarif
           publish_results: true
 
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@v7
         with:
           name: scorecard-sarif
           path: results.sarif

.github/workflows/security.yml

@@ -93,7 +93,7 @@ jobs:
       - name: make sbom
         run: make sbom
       - name: upload SBOM artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: creation-os-sbom
           path: SBOM.json

.github/workflows/slsa.yml

@@ -34,7 +34,7 @@ jobs:
           sha=$(sha256sum creation_os_v61_hardened | awk '{print $1}')
           echo "digest=$sha" >> "$GITHUB_OUTPUT"
           echo "sha256: $sha"
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@v7
         with:
           name: creation_os_v61_hardened
           path: creation_os_v61_hardened