Replace action/upload-artifact with a more secure alternative

Related: AAP-46204

Author: ssbarnea

.github/workflows/tox.yml

@@ -177,6 +177,7 @@ jobs:
           fi
           python3 -m pip install --disable-pip-version-check --upgrade --user --break-system-packages pip uv 'tox>=4.23.2' 'tox-uv>=1.16.0'
           which -a uv pip tox
+          python3 -m pip install git+https://github.com/tox-dev/tox.git@fix/3542
           echo "uv tool update-shell"
           tox --version
           echo "Log installed dists"
@@ -209,6 +210,15 @@ jobs:
             .tox/**/log/
             .tox/**/coverage.xml
 
+      - name: Archive logs and coverage data
+        uses: coactions/upload-artifact@v4
+        with:
+          name: logs-${{ matrix.name }}.zip
+          include-hidden-files: true
+          path: |
+            .tox/**/log/
+            .tox/**/coverage.xml
+
       - name: Upload test results to Codecov
         if: ${{ !cancelled() && hashFiles('junit.xml') != '' }}
         uses: codecov/test-results-action@v1

tox.ini

@@ -63,8 +63,6 @@ uv_seed = true
 [testenv:docs]
 description = Build docs
 extras = docs
-passenv =
-    *
 setenv =
   # see https://github.com/tox-dev/tox/issues/2092#issuecomment-2538729079
   # see https://github.com/Kozea/CairoSVG/issues/392#issuecomment-2538707712