ci: update artifact and CodeQL actions

Author: cobycloud

.github/workflows/container.yml

@@ -68,13 +68,13 @@ jobs:
           limit-severities-for-sarif: true
       - name: Retain the vulnerability report
         if: always()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7.0.1
         with:
           name: trivy-results
           path: trivy-results.sarif
       - name: Publish the vulnerability report
         if: always()
-        uses: github/codeql-action/upload-sarif@v3
+        uses: github/codeql-action/upload-sarif@v4
         with:
           sarif_file: trivy-results.sarif
 

.github/workflows/release.yml

@@ -32,7 +32,7 @@ jobs:
       - uses: actions/checkout@v7.0.1
       - uses: astral-sh/setup-uv@v10.0.0
       - run: uv build
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@v7.0.1
         with:
           name: python-distributions
           path: dist/
@@ -44,7 +44,7 @@ jobs:
     permissions:
       contents: write
     steps:
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v8.0.1
         with:
           name: python-distributions
           path: dist