Update actions/upload-artifact to version 4.0.0 (#2096)

Author: asf-rm

.github/workflows/scorecards-analysis.yaml

@@ -59,7 +59,7 @@ jobs:
           publish_results: true
 
       - name: "Upload artifact"
-        uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32    # 3.1.0
+        uses: actions/upload-artifact@c7d193f32edcb7bfad88892161225aeda64e9392    # 3.1.0
         with:
           name: SARIF file
           path: results.sarif

src/changelog/.2.x.x/update_actions_upload_artifact.xml

@@ -0,0 +1,8 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<entry xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+       xmlns="http://logging.apache.org/log4j/changelog"
+       xsi:schemaLocation="http://logging.apache.org/log4j/changelog https://logging.apache.org/log4j/changelog-0.1.2.xsd"
+       type="changed">
+  <issue id="2096" link="https://github.com/apache/logging-log4j2/pull/2096"/>
+  <description format="asciidoc">Update `actions/upload-artifact` to version `4.0.0`</description>
+</entry>

src/site/_release-notes/_2.x.x.adoc

@@ -27,6 +27,7 @@ This releases contains ...
 === Changed
 
 * Bumped the minimum Java version required for the build to Java 17. Runtime requirements remain unchanged. (https://github.com/apache/logging-log4j2/issues/2021[2021])
+* Update `actions/upload-artifact` to version `4.0.0` (https://github.com/apache/logging-log4j2/pull/2096[2096])
 * Update `ch.qos.logback:logback-classic` to version `1.3.14` (https://github.com/apache/logging-log4j2/pull/2029[2029])
 * Update `co.elastic.clients:elasticsearch-java` to version `8.11.2` (https://github.com/apache/logging-log4j2/pull/2078[2078])
 * Update `com.github.luben:zstd-jni` to version `1.5.5-11` (https://github.com/apache/logging-log4j2/pull/2030[2030])