chore(ci): fix CI warnings (#419)

Stacked on #418. Fixes the warnings reported by [CI run
38927727942](https://github.com/Devolutions/devolutions-crypto/actions/runs/38927727942).

## Fixed

- **Node 20 deprecation (actions)**: `download-artifact` v4 → v8,
`upload-artifact` v4/v4.3.6 → v7, `setup-python` v5 → v7, `setup-node`
v4 → v7, `setup-java` v3 → v6 (also clears the "setup-java v3 is
deprecated" warning). Uploads that were pinned to v4.3.6 get
`include-hidden-files: true` to keep the dotfile behaviour (v4.4+
excludes them by default). Artifacts are still zipped, so `dv github
download-artifact` in the release workflows is unaffected.
- **Cargo manifest**: drop `package.homepage` (redundant with
`package.repository`; printed on every cargo invocation). Add
`description`/`license`/`repository` to the `python` and
`devolutions-crypto-uniffi` crates (maturin's `cargo package --list`
warning).
- **cargo-deny yanked crate**: `chacha20` 0.10.1 → 0.10.2 (0.10.1 is
yanked). The lockfile diff touches only `chacha20`.
- **C# nullable warnings**:
- CS8632 in `dotnet-core`: enable `<Nullable>` (the shared test files
are annotated).
- CS8602/CS8604 in `android`: bump MSTest 3.0.0 → 3.7.1, matching the
local test project. MSTest 3.0.0 lacks `[NotNull]` on
`Assert.IsNotNull`; reproduced locally (42 warnings with 3.0.0, 0 with
3.7.1).
- CS8765 in iOS: `AppDelegate.FinishedLaunching` takes `NSDictionary?`.
- **NETSDK1202**: android nuget tests `net9.0-android` →
`net10.0-android` (CI already uses SDK 10). This is a separate commit,
so it's easy to drop if needed.
- **Kotlin Gradle deprecations**: `kotlinOptions` → `compilerOptions`;
library `targetSdk` moved to `testOptions`/`lint`.

## Not fixed (out of this repo's control)

- `uniffi.toml` "old-style --config": maturin passes the crate's
`uniffi.toml` to uniffi-bindgen 0.32 via `--config`. Python doesn't use
the `[bindings.kotlin]` section, and rewriting the file risks the Kotlin
package name.
- `zip v2.4.2` yanked, `buf_redux`/`multipart` future-incompat: these
come from the wasm-pack / wasm-bindgen-cli lockfiles installed with
`--locked`.
- emcc `WASM_BIGINT is deprecated`: injected by rustc's
`wasm32-unknown-emscripten` target, not by our flags.
- cargo-deny duplicate crates (`rand`, `getrandom`, `syn`, …): this
needs dependency-tree work and is out of scope.
- Homebrew "Skipping X / Treating azure-cli as a formula": these come
from re-running the Homebrew installer on the macOS runner.
- Runner notices (macOS arm64 capacity, `ubuntu-latest` → Ubuntu 26
migration) and the wasm-pack PATH hint.

## Verification

- `cargo test --lib`: 46 passed. `cargo package --list` no longer prints
manifest warnings.
- The local C# test project and the `dotnet-core` test project (built
against the source project) both build with 0 warnings.
- The `kotlin-android` lib builds with the new DSL
(`:lib:compileReleaseKotlin`).
- Android/iOS builds and the action bumps are verified by this PR's CI.

Author: mmorrissette-devolutions

.github/workflows/formatting/csharp/action.yml

@@ -4,7 +4,7 @@ runs:
   using: composite
   steps:
     - name: Download Config
-      uses: actions/download-artifact@v4
+      uses: actions/download-artifact@v8
       with:
         name: config.txt
         path: ./wrappers/csharp

.github/workflows/formatting/rust/action.yml

@@ -3,7 +3,7 @@ description: Ensure that the Rust code format is compliant
 runs:
   using: composite
   steps:
-    - uses: actions/setup-python@v5
+    - uses: actions/setup-python@v7
       with:
         python-version: "3.7"
 

.github/workflows/kotlin/kotlin-linux/action.yml

@@ -4,12 +4,12 @@ runs:
   using: composite
   steps:
     - name: Download Version File
-      uses: actions/download-artifact@v4
+      uses: actions/download-artifact@v8
       with:
         name: config.txt
 
     - name: Set up JDK 17
-      uses: actions/setup-java@v3
+      uses: actions/setup-java@v6
       with:
         distribution: 'temurin'
         java-version: '17'
@@ -22,7 +22,7 @@ runs:
         echo "version=$version" >> $GITHUB_OUTPUT
 
     - name: Download Native Libs
-      uses: actions/download-artifact@v4
+      uses: actions/download-artifact@v8
       with:
         pattern: kotlin-*
         merge-multiple: true
@@ -131,14 +131,16 @@ runs:
 
 
     - name: Upload Kotlin JVM package
-      uses: actions/upload-artifact@v4.3.6
+      uses: actions/upload-artifact@v7
       with:
+        include-hidden-files: true
         name: kotlin-jvm
         path: ./wrappers/kotlin/lib/build
 
     - name: Upload Kotlin Android package
-      uses: actions/upload-artifact@v4.3.6
+      uses: actions/upload-artifact@v7
       with:
+        include-hidden-files: true
         name: kotlin-android
         path: ./wrappers/kotlin-android/lib/build
 

.github/workflows/kotlin/kotlin-macos/action.yml

@@ -4,7 +4,7 @@ runs:
   using: composite
   steps:
     - name: Download Version File
-      uses: actions/download-artifact@v4
+      uses: actions/download-artifact@v8
       with:
         name: config.txt
 
@@ -35,7 +35,8 @@ runs:
         ./gradlew generatePomFileForMavenPublication
 
     - name: Upload Kotlin package
-      uses: actions/upload-artifact@v4.3.6
+      uses: actions/upload-artifact@v7
       with:
+        include-hidden-files: true
         name: kotlin-macos
         path: ./wrappers/kotlin/lib/src/main/resources/

.github/workflows/kotlin/kotlin-windows/action.yml

@@ -4,12 +4,12 @@ runs:
   using: composite
   steps:
     - name: Download Version File
-      uses: actions/download-artifact@v4
+      uses: actions/download-artifact@v8
       with:
         name: config.txt
 
     - name: Set up JDK 17
-      uses: actions/setup-java@v3
+      uses: actions/setup-java@v6
       with:
         distribution: 'temurin'
         java-version: '17'
@@ -34,7 +34,8 @@ runs:
 
 
     - name: Upload Kotlin package
-      uses: actions/upload-artifact@v4.3.6
+      uses: actions/upload-artifact@v7
       with:
+        include-hidden-files: true
         name: kotlin-windows
         path: ./wrappers/kotlin/lib/src/main/resources/

.github/workflows/native/native-build-ios/action.yml

@@ -4,7 +4,7 @@ runs:
   using: composite
   steps:
     - name: Download Config
-      uses: actions/download-artifact@v4
+      uses: actions/download-artifact@v8
       with:
         name: config.txt
         path: ./wrappers/csharp
@@ -115,7 +115,8 @@ runs:
         mkdir -p ./ios/ios
         cp -R ./tmp/ios/. ./ios/ios
 
-    - uses: actions/upload-artifact@v4.3.6
+    - uses: actions/upload-artifact@v7
       with:
+        include-hidden-files: true
         name: native-ios
         path: ./wrappers/csharp/ios

.github/workflows/native/native-build-linux/action.yml

@@ -4,7 +4,7 @@ runs:
   using: composite
   steps:
     - name: Download Config
-      uses: actions/download-artifact@v4
+      uses: actions/download-artifact@v8
       with:
         name: config.txt
         path: ./wrappers/csharp
@@ -156,8 +156,9 @@ runs:
         
         dotnet build ./src/devolutions-crypto.csproj --framework netstandard2.0  -p:DefineConstants=BROWSER -p:Version="$VERSION_MANAGED" --configuration Release --output ./browser-wasm/bin
 
-    - uses: actions/upload-artifact@v4.3.6
+    - uses: actions/upload-artifact@v7
       with:
+        include-hidden-files: true
         name: native-android-linux
         path: |
           wrappers/csharp/android/**

.github/workflows/native/native-build-macos/action.yml

@@ -4,7 +4,7 @@ runs:
   using: composite
   steps:
     - name: Download Config
-      uses: actions/download-artifact@v4
+      uses: actions/download-artifact@v8
       with:
         name: config.txt
         path: ./wrappers/csharp
@@ -68,7 +68,8 @@ runs:
         mv wrappers/csharp/macos-temp/* wrappers/csharp/macos/macos/
         rmdir wrappers/csharp/macos-temp
 
-    - uses: actions/upload-artifact@v4.3.6
+    - uses: actions/upload-artifact@v7
       with:
+        include-hidden-files: true
         name: native-macos
         path: wrappers/csharp/macos/

.github/workflows/native/native-build-windows/action.yml

@@ -4,7 +4,7 @@ runs:
   using: composite
   steps:
     - name: Download Config
-      uses: actions/download-artifact@v4
+      uses: actions/download-artifact@v8
       with:
         name: config.txt
         path: ./wrappers/csharp
@@ -52,8 +52,9 @@ runs:
         dotnet build ./src/devolutions-crypto.csproj --framework netstandard2.0 -p:Version="$VERSION_MANAGED" --configuration Release --output ./dotnet-core/bin
         dotnet build ./src/devolutions-crypto.csproj --framework net48 -p:Version="$VERSION_MANAGED" --configuration Release --output ./dotnet-framework/bin
 
-    - uses: actions/upload-artifact@v4.3.6
+    - uses: actions/upload-artifact@v7
       with:
+        include-hidden-files: true
         name: native-windows
         path: |
           wrappers/csharp/windows/**

.github/workflows/nugets/nugets-windows/action.yml

@@ -4,17 +4,17 @@ runs:
   using: composite
   steps:
     - name: Download Config
-      uses: actions/download-artifact@v4
+      uses: actions/download-artifact@v8
       with:
         name: config.txt
         path: ./wrappers/csharp
 
-    - uses: actions/setup-python@v5
+    - uses: actions/setup-python@v7
       with:
         python-version: "3.7"
 
     - name: Download Native Libs
-      uses: actions/download-artifact@v4
+      uses: actions/download-artifact@v8
       with:
         pattern: native-*
         merge-multiple: true
@@ -43,7 +43,8 @@ runs:
       shell: bash
       run: mv wrappers/csharp/nuget/dotnet-core/package/*.nupkg .
 
-    - uses: actions/upload-artifact@v4.3.6
+    - uses: actions/upload-artifact@v7
       with:
+        include-hidden-files: true
         name: nugets-windows
         path: ./*.nupkg