build(deps): bump the actions group across 1 directory with 2 updates

.github/workflows/bench.yml

@@ -86,7 +86,7 @@ jobs:
         cat "$RUNNER_TEMP/results/gate.md" >> "$GITHUB_STEP_SUMMARY"
         exit $status
 
-    - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+    - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
       if: always() && steps.base.outputs.skip != 'true'
       with:
         name: benchmarks

.github/workflows/ci.yml

@@ -147,7 +147,7 @@ jobs:
         LIBPHASH_REQUIRE_C_REFERENCE: '1'
       run: uv run --no-sync coverage run -m pytest -rs
 
-    - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+    - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
       with:
         name: coverage-${{ matrix.os }}-${{ matrix.python }}
         path: .coverage.*
@@ -174,7 +174,7 @@ jobs:
     - name: Install the locked dependencies
       run: uv sync --locked --all-extras --no-install-project
 
-    - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+    - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
       with:
         pattern: coverage-*
         merge-multiple: true
@@ -185,7 +185,7 @@ jobs:
     - name: HTML report
       run: uv run --no-sync coverage html --no-skip-covered --fail-under=0
 
-    - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+    - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
       with:
         name: coverage-html
         path: htmlcov/
@@ -219,7 +219,7 @@ jobs:
     - name: pytest
       run: '"$RUNNER_TEMP/venv/bin/python" -m pytest -rs'
 
-    - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+    - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
       with:
         name: sdist
         path: dist/*.tar.gz
@@ -300,7 +300,7 @@ jobs:
       if: ${{ !cancelled() }}
       run: .venv/bin/python tools/sanitizers.py check sanitizer-logs
 
-    - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+    - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
       if: failure()
       with:
         name: sanitizers-${{ matrix.sanitizer }}

.github/workflows/fuzz.yml

@@ -62,7 +62,7 @@ jobs:
       if: ${{ !cancelled() }}
       run: .venv/bin/python tools/sanitizers.py check sanitizer-logs
 
-    - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+    - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
       if: failure()
       with:
         name: fuzz-${{ matrix.target }}

.github/workflows/mutation.yml

@@ -60,7 +60,7 @@ jobs:
     - name: Every mutant caught or listed as equivalent
       run: uv run --no-sync python tools/mutants.py | tee mutation-report.md
 
-    - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+    - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
       if: ${{ !cancelled() }}
       with:
         name: mutation-report

.github/workflows/release.yml

@@ -121,7 +121,7 @@ jobs:
     permissions:
       id-token: write
     steps:
-    - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+    - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
       with:
         pattern: '{wheels-*,sdist}'
         merge-multiple: true
@@ -140,7 +140,7 @@ jobs:
     permissions:
       id-token: write
     steps:
-    - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+    - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
       with:
         pattern: '{wheels-*,sdist}'
         merge-multiple: true
@@ -166,7 +166,7 @@ jobs:
         persist-credentials: false
         submodules: true
 
-    - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+    - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
       with:
         pattern: '{wheels-*,sdist}'
         merge-multiple: true

.github/workflows/site.yml

@@ -72,7 +72,7 @@ jobs:
           'build/site/**/*.html'
         fail: true
 
-    - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+    - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
       with:
         name: site-html
         path: build/site/

.github/workflows/wheels.yml

@@ -86,7 +86,7 @@ jobs:
         uvx twine check --strict wheelhouse/*.whl
         uvx check-wheel-contents wheelhouse/*.whl
 
-    - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+    - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
       with:
         name: wheels-${{ matrix.platform }}
         path: wheelhouse/*.whl
@@ -114,7 +114,7 @@ jobs:
           done
         done
 
-    - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+    - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
       with:
         name: hash-tables-${{ matrix.platform }}
         path: tables/*.txt
@@ -126,7 +126,7 @@ jobs:
     runs-on: ubuntu-24.04
     timeout-minutes: 10
     steps:
-    - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+    - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
       with:
         pattern: hash-tables-*
         merge-multiple: true
@@ -183,7 +183,7 @@ jobs:
         "$RUNNER_TEMP/offline/bin/python" -m pip install --no-index --no-deps "$RUNNER_TEMP"/wheel/*.whl
         "$RUNNER_TEMP/offline/bin/python" -c "import libphash; print(libphash.build_info())"
 
-    - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+    - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
       with:
         name: sdist
         path: dist/*.tar.gz