From 877743fde805060a8a9753ec52f4ce54f431dd14 Mon Sep 17 00:00:00 2001
From: Matthias Valvekens <matthias@mvalvekens.be>
Date: Sun, 17 Nov 2024 16:16:56 +0100
Subject: [PATCH] Upgrade workflow dependencies

---
 .github/workflows/build-pipeline.yml | 18 +++++++++---------
 .github/workflows/release.yml        | 15 ++++++---------
 2 files changed, 15 insertions(+), 18 deletions(-)

diff --git a/.github/workflows/build-pipeline.yml b/.github/workflows/build-pipeline.yml
index 4acb6ce..70e66eb 100644
--- a/.github/workflows/build-pipeline.yml
+++ b/.github/workflows/build-pipeline.yml
@@ -27,7 +27,7 @@ jobs:
       - name: build
         run: python -m build
       - name: Upload dist artifacts
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         with:
           name: certomancer-dist
           path: dist/
@@ -44,7 +44,7 @@ jobs:
         with:
           python-version: ${{ matrix.python-version }}
       - name: Download dist artifacts
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v4
         with:
           name: certomancer-dist
           path: dist/
@@ -63,7 +63,7 @@ jobs:
       - name: Test with pytest
         run: python -m pytest --cov=./ --cov-report=xml:python-${{ matrix.python-version }}-coverage.xml
       - name: Stash coverage report
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         with:
           name: coverage
           path: "*-coverage.xml"
@@ -72,7 +72,7 @@ jobs:
     needs: build
     strategy:
       matrix:
-        python-version: ["3.7", "3.8", "3.9", "3.10", "3.11"]
+        python-version: ["3.7", "3.8", "3.9", "3.10", "3.11", "3.12", "3.13"]
     steps:
       - uses: actions/checkout@v3
       - name: Set up Python ${{ matrix.python-version }}
@@ -80,7 +80,7 @@ jobs:
         with:
           python-version: ${{ matrix.python-version }}
       - name: Download dist artifacts
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v4
         with:
           name: certomancer-dist
           path: dist/
@@ -99,7 +99,7 @@ jobs:
           python -m pytest -m "not needcrypto" --cov=./ \
               --cov-report=xml:python-minimal-${{ matrix.python-version }}-coverage.xml
       - name: Stash coverage report
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         with:
           name: coverage
           path: "*-coverage.xml"
@@ -110,7 +110,7 @@ jobs:
       # checkout necessary to ensure the uploaded report contains the correct paths
       - uses: actions/checkout@v3
       - name: Retrieve coverage reports
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v4
         with:
           name: coverage
           path: ./reports/
@@ -122,6 +122,6 @@ jobs:
           env_vars: OS,PYTHON
           name: codecov-umbrella
       - name: Clean up coverage reports
-        uses: GeekyEggo/delete-artifact@v2
+        uses: GeekyEggo/delete-artifact@v5
         with:
-          name: coverage
+          name: coverage-*
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 4dd3b79..38a5a26 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -37,7 +37,7 @@ jobs:
               exit 1
           fi
           cat "$GITHUB_OUTPUT"
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: Get version information
         id: getversion
         run: |
@@ -51,7 +51,7 @@ jobs:
         env:
           VERSION: ${{ steps.getversion.outputs.version }}
       - name: Upload release body
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         with:
           name: release-body
           path: release.md
@@ -68,12 +68,12 @@ jobs:
       discussions: write
     steps:
       - name: Download dist artifacts
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v4
         with:
           name: certomancer-dist
           path: dist/
       - name: Download release body
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v4
         with:
           name: release-body
           path: release-body
@@ -82,17 +82,14 @@ jobs:
         with:
           repository-url: ${{ vars.REPOSITORY_URL }}
       - name: Sign with sigstore
-        uses: sigstore/gh-action-sigstore-python@v1.2.3
+        uses: sigstore/gh-action-sigstore-python@v3.0.0
         with:
           inputs: ./dist/*
           # useful to inspect workflow artifacts in test runs
           upload-signing-artifacts: true
-          # Append only the .sigstore bundle,
-          # the .sig suffix conflicts with my own GPG signatures
-          bundle-only: true
       - name: Create GitHub release
         if: needs.extract-params.outputs.publish-env == 'release' && startsWith(github.ref, 'refs/tags/')
-        uses: softprops/action-gh-release@v1
+        uses: softprops/action-gh-release@v2
         with:
           files: |
             dist/*.whl