Bump secondlife/setup-nfpm from 3 to 4 (#13)

* Bump secondlife/setup-nfpm from 3 to 4

Bumps [secondlife/setup-nfpm](https://github.com/secondlife/setup-nfpm) from 3 to 4.
- [Release notes](https://github.com/secondlife/setup-nfpm/releases)
- [Commits](secondlife/setup-nfpm@v3...v4)

---
updated-dependencies:
- dependency-name: secondlife/setup-nfpm
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

* Make permissions explicit in the Test workflow [dependabot skip]

* Update target version of actions/upload-artifact in the readme [dependabot skip]

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

.github/workflows/test.yaml

@@ -6,6 +6,9 @@ on:
     branches: [main]
     tags: [v*]
 
+permissions:
+  contents: read
+
 jobs:
   test:
     name: Test

README.md

@@ -20,7 +20,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: secondlife/action-nfpm@v2
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@v7
         with:
           name: dist
           path: dist/
@@ -40,7 +40,7 @@ jobs:
       - uses: secondlife/action-nfpm@v2
         with:
           packager: rpm
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@v7
         with:
           name: dist
           path: dist/

action.yaml

@@ -34,7 +34,7 @@ runs:
       with:
         fetch-depth: 0 # Required for github-action-get-previous-tag
 
-    - uses: secondlife/setup-nfpm@v3
+    - uses: secondlife/setup-nfpm@v4
       if: ${{ fromJSON(inputs.setup-nfpm) }}
 
     - uses: secondlife-3p/github-action-get-previous-tag@v1