Merge pull request #2346 from sustainable-computing-io/dependabot/github_actions/github-actions-3249c11fdc

chore(deps): bump the github-actions group with 2 updates

Author: vprashar2929

.github/workflows/config-change.yaml

@@ -80,7 +80,7 @@ jobs:
       # NOTE: Uploading the message as an artifact so that PR Comment workflow can use it to
       # add comment on PR with the message.
       - name: Upload message
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         with:
           name: message
           path: /tmp/message-${{ github.event.pull_request.number }}.txt

.github/workflows/pr-comment.yaml

@@ -25,7 +25,7 @@ jobs:
       - name: Download comment message
         id: download-artifact
         continue-on-error: true
-        uses: actions/download-artifact@v5
+        uses: actions/download-artifact@v6
         with:
           name: message
           path: /tmp/

.github/workflows/profiling.yaml

@@ -96,7 +96,7 @@ jobs:
           ./hack/reports/profiling.sh compare
 
       - name: Upload profiling artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         with:
           name: profile-artifacts-${{ github.event.pull_request.number }}
           path: ./tmp/*
@@ -138,7 +138,7 @@ jobs:
         run: go install github.com/google/pprof@6e76a2b096b5fa52e4bb3f7f7a357bd6e6b3b7b1
 
       - name: Download profiling artifacts
-        uses: actions/download-artifact@v5
+        uses: actions/download-artifact@v6
         with:
           name: profile-artifacts-${{ github.event.pull_request.number }}
           path: ./tmp
@@ -161,7 +161,7 @@ jobs:
       # NOTE: Uploading the message as an artifact so that PR Comment workflow can use it to
       # add comment on PR with the message.
       - name: Upload message
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         with:
           name: message
           path: /tmp/message-${{ github.event.pull_request.number }}.txt

.github/workflows/scorecard.yml

@@ -51,7 +51,7 @@ jobs:
       # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
       # format to the repository Actions tab.
       - name: Upload artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         with:
           name: SARIF file
           path: scorecard-results.sarif

.github/workflows/test-and-codecov.yaml

@@ -24,7 +24,7 @@ jobs:
         run: make test
 
       - name: Upload coverage report as artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         with:
           name: coverage-report
           path: coverage.out # The file name of the coverage report should be same as what make target uses
@@ -37,7 +37,7 @@ jobs:
         uses: actions/checkout@v5
 
       - name: Download coverage report artifact
-        uses: actions/download-artifact@v5
+        uses: actions/download-artifact@v6
         with:
           name: coverage-report