ci: bump the actions group across 1 directory with 10 updates

.github/workflows/reusable-build-native-and-wasm-wheels.yml

@@ -34,7 +34,7 @@ jobs:
           - windows-latest
     steps:
       - name: Check out exact release
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           ref: ${{ inputs.release-ref }}
           submodules: ${{ inputs.checkout-submodules && 'recursive' || 'false' }}
@@ -51,10 +51,10 @@ jobs:
           fi
 
       - name: Build native wheels
-        uses: pypa/cibuildwheel@v4.1.0
+        uses: pypa/cibuildwheel@v4.2.0
 
       - name: Upload native wheels
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: native-wheels-${{ inputs.distribution-name }}-${{ matrix.os }}
           path: wheelhouse/*.whl
@@ -64,7 +64,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out exact release
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           ref: ${{ inputs.release-ref }}
           submodules: ${{ inputs.checkout-submodules && 'recursive' || 'false' }}
@@ -80,22 +80,22 @@ jobs:
           }
 
       - name: Set up Java
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@v5
         with:
           distribution: temurin
           java-version: "17"
 
       - name: Set up Android SDK
-        uses: android-actions/setup-android@v3
+        uses: android-actions/setup-android@v4
 
       - name: Build Android wheels
-        uses: pypa/cibuildwheel@v4.1.0
+        uses: pypa/cibuildwheel@v4.2.0
         env:
           CIBW_PLATFORM: android
           ANDROID_HOME: ${{ env.ANDROID_SDK_ROOT }}
 
       - name: Upload Android wheels
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: native-wheels-${{ inputs.distribution-name }}-android
           path: wheelhouse/*.whl
@@ -105,7 +105,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out exact release
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           ref: ${{ inputs.release-ref }}
           submodules: ${{ inputs.checkout-submodules && 'recursive' || 'false' }}
@@ -125,12 +125,12 @@ jobs:
       # cp313/pyemscripten_2025_0 and cp314/pyemscripten_2026_0. The retired
       # scripts/build_pyodide_wheel.sh produced only the latter.
       - name: Build WASM wheels
-        uses: pypa/cibuildwheel@v4.1.0
+        uses: pypa/cibuildwheel@v4.2.0
         env:
           CIBW_PLATFORM: pyodide
 
       - name: Upload WASM wheels
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: native-wheels-${{ inputs.distribution-name }}-wasm
           path: wheelhouse/*.whl
@@ -144,7 +144,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Download every platform wheel
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v8
         with:
           pattern: native-wheels-${{ inputs.distribution-name }}-*
           merge-multiple: true
@@ -179,7 +179,7 @@ jobs:
           python -m twine check dist/*.whl
 
       - name: Upload complete validated wheel set
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: testpypi-${{ inputs.distribution-name }}-${{ inputs.version }}
           path: dist/*.whl

.github/workflows/reusable-build-pure-python-distribution.yml

@@ -40,12 +40,12 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out the exact release
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           ref: ${{ inputs.release-ref }}
 
       - name: Set up Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v7
         with:
           python-version: "3.12"
 
@@ -93,7 +93,7 @@ jobs:
           fi
 
       - name: Upload validated distributions
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: testpypi-${{ inputs.distribution-name }}-${{ inputs.version }}
           path: dist/*

.github/workflows/reusable-build-pydevices-distributions.yml

@@ -21,18 +21,18 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out the exact release
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           ref: ${{ inputs.release-ref }}
 
       - name: Check out shared publishing tools
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           repository: PyDevices/.github
           ref: ${{ inputs.publishing-tools-ref }}
           path: .pydevices-publishing-tools
 
-      - uses: actions/setup-python@v5
+      - uses: actions/setup-python@v7
         with:
           python-version: "3.12"
 
@@ -57,7 +57,7 @@ jobs:
             --version "$RELEASE_VERSION"
 
       - name: Upload validated distributions
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: testpypi-pydevices-${{ inputs.version }}
           path: .pydevices-publication/dist/*

.github/workflows/reusable-publish-release-packages.yml

@@ -112,7 +112,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Download the validated distributions
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v8
         with:
           name: testpypi-${{ inputs.distribution-name }}-${{ needs.prepare-release.outputs.version }}
           path: dist

.github/workflows/reusable-request-mip-publication.yml

@@ -25,7 +25,7 @@ jobs:
     steps:
       - name: Mint an installation token for mip
         id: app-token
-        uses: actions/create-github-app-token@v2
+        uses: actions/create-github-app-token@v3
         with:
           app-id: ${{ secrets.PYDEVICES_APP_ID }}
           private-key: ${{ secrets.PYDEVICES_APP_PRIVATE_KEY }}

.github/workflows/reusable-synchronize-mip-package.yml

@@ -45,21 +45,21 @@ jobs:
     steps:
       - name: Mint an installation token for mip
         id: app-token
-        uses: actions/create-github-app-token@v2
+        uses: actions/create-github-app-token@v3
         with:
           app-id: ${{ secrets.PYDEVICES_APP_ID }}
           private-key: ${{ secrets.PYDEVICES_APP_PRIVATE_KEY }}
           owner: PyDevices
           repositories: mip
 
       - name: Check out the MIP index source
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           token: ${{ steps.app-token.outputs.token }}
           fetch-depth: 0
 
       - name: Check out shared publishing tools
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           repository: PyDevices/.github
           ref: ${{ inputs.publishing-tools-ref }}
@@ -175,9 +175,9 @@ jobs:
           touch "$PACKAGE_INDEX_PATH/.nojekyll"
 
       - name: Configure GitHub Pages
-        uses: actions/configure-pages@v5
+        uses: actions/configure-pages@v6
 
       - name: Upload the GitHub Pages artifact
-        uses: actions/upload-pages-artifact@v3
+        uses: actions/upload-pages-artifact@v5
         with:
           path: ${{ env.PACKAGE_INDEX_PATH }}

.github/workflows/reusable-validate-pyscript-filesystem-toml.yml

@@ -26,10 +26,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out product source
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Check out shared publishing tools
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           repository: PyDevices/.github
           ref: ${{ inputs.publishing-tools-ref }}