build(deps): bump actions/upload-artifact from 6.0.0 to 7.0.2

.github/workflows/coverage.yml

@@ -37,7 +37,7 @@ jobs:
           set -euo pipefail
           cargo llvm-cov --locked --lcov --output-path lcov.info
           cargo llvm-cov report --summary-only | tee -a "$GITHUB_STEP_SUMMARY"
-      - uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6
+      - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: lcov
           path: lcov.info

.github/workflows/release.yml

@@ -51,7 +51,7 @@ jobs:
           cargo cyclonedx --format json --spec-version 1.5 --override-filename wraith-linux-x86_64.cdx
           mv wraith-linux-x86_64.cdx.json target/dist/
           jq -e '.bomFormat == "CycloneDX" and (.components | length > 0)' target/dist/wraith-linux-x86_64.cdx.json >/dev/null
-      - uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6
+      - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: wraith-linux-x86_64
           path: |

.github/workflows/scorecard.yml

@@ -28,7 +28,7 @@ jobs:
           results_file: results.sarif
           results_format: sarif
           publish_results: true
-      - uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6
+      - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: scorecard-sarif
           path: results.sarif