ci(deps): bump actions/upload-artifact from 4 to 7

.github/workflows/benchmark-regression.yml

@@ -164,7 +164,7 @@ jobs:
 
       - name: Upload benchmark artifacts
         if: always()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: benchmark-results
           path: |

.github/workflows/benchmark.yml

@@ -110,7 +110,7 @@ jobs:
 
       - name: Upload benchmark report
         if: always()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: benchmark-report
           path: benchmark-report.json

.github/workflows/ci.yml

@@ -99,7 +99,7 @@ jobs:
           DEEPSEEK_API_KEY: ${{ secrets.DEEPSEEK_API_KEY }}
       - name: Upload test results (Node 22 only)
         if: matrix.node-version == '22' && always()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: test-results-node-${{ matrix.node-version }}
           path: |
@@ -130,7 +130,7 @@ jobs:
           DEEPSEEK_API_KEY: ${{ secrets.DEEPSEEK_API_KEY }}
       - name: Upload integration test artifacts
         if: always()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: integration-test-results
           path: test-results/
@@ -180,7 +180,7 @@ jobs:
           DEEPSEEK_API_KEY: ${{ secrets.DEEPSEEK_API_KEY }}
       - name: Upload E2E test artifacts
         if: always()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: e2e-test-results
           path: test-results/
@@ -239,7 +239,7 @@ jobs:
           echo "::notice::All coverage dimensions meet thresholds (lines≥95%, branches≥89%, functions≥95%, statements≥95%)."
       - name: Upload coverage report
         if: always()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: coverage-report
           path: coverage/
@@ -324,7 +324,7 @@ jobs:
         run: node scripts/check-benchmarks.js
       - name: Upload benchmark results
         if: always()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: benchmark-results
           path: bench-results.json

.github/workflows/coverage.yml

@@ -86,7 +86,7 @@ jobs:
 
       - name: Upload coverage report
         if: always()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: coverage-report
           path: coverage/

.github/workflows/docker-publish.yml

@@ -223,7 +223,7 @@ jobs:
           output-file: ./sbom.spdx.json
 
       - name: Upload SBOM
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: sbom-${{ github.sha }}
           path: ./sbom.spdx.json

.github/workflows/docs.yml

@@ -61,7 +61,7 @@ jobs:
 
       - name: Upload link check report
         if: always()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: link-check-report
           path: lychee-out.md

.github/workflows/pr-review.yml

@@ -553,7 +553,7 @@ jobs:
           npx @cyclonedx/cyclonedx-npm --output-format xml --output-file sbom.xml
 
       - name: Upload SBOM
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: sbom
           path: |

.github/workflows/publish-docker.yml

@@ -68,7 +68,7 @@ jobs:
         run: node scripts/generate-sbom.mjs --output docker-sbom.spdx.json
 
       - name: Upload Docker SBOM
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: docker-sbom
           path: docker-sbom.spdx.json

.github/workflows/publish-npm.yml

@@ -41,7 +41,7 @@ jobs:
         run: pnpm test:unit --coverage
 
       - name: Upload coverage
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: coverage-npm-publish
           path: coverage/
@@ -78,7 +78,7 @@ jobs:
         run: node scripts/generate-sbom.mjs --output sbom.spdx.json
 
       - name: Upload SBOM
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: sbom
           path: sbom.spdx.json

.github/workflows/real-world-validation.yml

@@ -124,7 +124,7 @@ jobs:
 
       - name: Upload validation report
         if: always()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: ${{ matrix.project }}-validation-report
           path: >-

.github/workflows/security-audit.yml

@@ -132,7 +132,7 @@ jobs:
           output-file: sbom.spdx.json
 
       - name: Upload SBOM
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: sbom
           path: sbom.spdx.json

.github/workflows/vscode-ci.yml

@@ -139,7 +139,7 @@ jobs:
         run: pnpm exec vsce package --out ../../dist/code-analyzer.vsix
 
       - name: Upload .vsix artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: code-analyzer-vsix
           path: dist/code-analyzer.vsix