From b3cc1afe7b42a424a5c1e37cb4bccb0a3f855a8a Mon Sep 17 00:00:00 2001
From: DesvoSoft <desvox23@gmail.com>
Date: Sun, 18 Oct 2026 13:19:20 -0600
Subject: [PATCH] ci: bump GitHub Actions to their Node 24 majors

checkout v7, setup-python v7, upload-artifact v7, download-artifact v8 and
action-gh-release v3, in one change instead of five Dependabot PRs
(#6-#10). All run on GitHub-hosted runners; none of the breaking notes
apply (no pull_request_target, no self-hosted runners).
---
 .github/workflows/build.yml | 14 +++++++-------
 .github/workflows/tests.yml |  4 ++--
 2 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 6a0d1a0..43c248f 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -37,11 +37,11 @@ jobs:
             ASSET_NAME: ZeroBlockBridge
     steps:
       # 1. Checkout code
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       # 2. Set up Python
       - name: Set up Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v7
         with:
           python-version: '3.11'
           cache: 'pip'
@@ -113,7 +113,7 @@ jobs:
 
       # 8. Upload artifacts
       - name: Upload Artifacts
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: ZeroBlockBridge-${{ matrix.TARGET }}
           path: dist/*
@@ -126,15 +126,15 @@ jobs:
     permissions:
       contents: write
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Set up Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v7
         with:
           python-version: '3.11'
 
       - name: Download build artifacts
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v8
         with:
           pattern: ZeroBlockBridge-*
           merge-multiple: true
@@ -148,7 +148,7 @@ jobs:
         run: python tools/extract_changelog_section.py "$TAG_NAME" --strict > release_notes.md
 
       - name: Create Release and Upload Assets
-        uses: softprops/action-gh-release@v2
+        uses: softprops/action-gh-release@v3
         with:
           body_path: release_notes.md
           prerelease: ${{ contains(github.ref_name, '-') }}
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index 2a88438..e648c37 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -23,12 +23,12 @@ jobs:
       matrix:
         os: [ubuntu-latest, windows-latest]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0  # the QA gate diffs against the PR base branch
 
       - name: Set up Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v7
         with:
           python-version: "3.11"
           cache: 'pip'