Update GitHub Actions runtimes

Author: Meidie Fei

.github/workflows/release.yml

@@ -37,10 +37,10 @@ jobs:
         python-version: ["3.11", "3.13"]
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Set up Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version: ${{ matrix.python-version }}
           cache: pip
@@ -68,12 +68,12 @@ jobs:
       release_id: ${{ steps.release-id.outputs.release_id }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
 
       - name: Set up Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version: "3.13"
           cache: pip
@@ -117,14 +117,14 @@ jobs:
           echo "release_id=${release_id}" >> "${GITHUB_OUTPUT}"
 
       - name: Upload distribution artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: python-dist
           path: dist/*
           if-no-files-found: error
 
       - name: Upload transparency artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: release-transparency
           path: release-artifacts/${{ steps.release-id.outputs.release_id }}/*
@@ -169,7 +169,7 @@ jobs:
 
       - name: Upload published verification result
         if: startsWith(github.ref, 'refs/tags/v') && always()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: published-release-verification-${{ github.ref_name }}
           path: published-release-verification.json
@@ -221,7 +221,7 @@ jobs:
       id-token: write
     steps:
       - name: Download distribution artifact
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v7
         with:
           name: python-dist
           path: dist

.github/workflows/verify-published-release.yml

@@ -20,10 +20,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout verifier
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Set up Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version: "3.13"
 
@@ -54,7 +54,7 @@ jobs:
 
       - name: Upload verification result
         if: always()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: published-release-verification-${{ steps.release.outputs.tag }}
           path: published-release-verification.json

CHANGELOG.md

@@ -1,5 +1,10 @@
 # Changelog
 
+## Unreleased
+
+- Move GitHub checkout, Python setup, and artifact transfer actions to their
+  Node 24-compatible major versions for future release and verification runs.
+
 ## 1.1.1 - 2026-07-13
 
 - Correct the public checksum manifest to cover the flat GitHub release assets.