Build manylinux/musllinux aarch64 wheels

Replaces the duplicated manylinux_x86_64/musllinux_i686 matrix
entries with aarch64 builds on GitHub's native ubuntu-24.04-arm
runner (no QEMU emulation needed).

Also bumps actions/checkout, cibuildwheel, and upload/download-artifact
past the retired v3 actions (GitHub now hard-fails any job using
actions/upload-artifact@v3), which was blocking CI on master entirely.
upload-artifact v4 requires unique names per upload, so each matrix
leg and the sdist job now upload under distinct names, merged back
together in upload_pypi via download-artifact's pattern/merge-multiple.

Closes #80

Author: colinbjohnson

.github/workflows/wheels.yml

@@ -34,8 +34,8 @@ jobs:
         buildplat:
         - [ubuntu-latest, manylinux_x86_64, auto]
         - [ubuntu-latest, musllinux_i686, auto]
-        - [ubuntu-latest, manylinux_x86_64, auto]
-        - [ubuntu-latest, musllinux_i686, auto]
+        - [ubuntu-24.04-arm, manylinux_aarch64, auto]
+        - [ubuntu-24.04-arm, musllinux_aarch64, auto]
         - [windows-latest, win_amd64, auto]
         - [windows-latest, win32, auto]
         - [macos-latest, macosx_x86_64, x86_64]
@@ -44,29 +44,31 @@ jobs:
         python: ["cp310"]
 
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
 
       - name: Build wheels
-        uses: pypa/cibuildwheel@v2.15.0
+        uses: pypa/cibuildwheel@v2.20.0
         env:
           CIBW_ARCHS: ${{ matrix.buildplat[2] }}
           CIBW_BUILD: ${{ matrix.python }}-${{ matrix.buildplat[1] }}
 
-      - uses: actions/upload-artifact@v3
+      - uses: actions/upload-artifact@v4
         with:
+          name: wheels-${{ matrix.buildplat[1] }}
           path: ./wheelhouse/*.whl
 
   build_sdist:
     name: Build source distribution
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
 
       - name: Build sdist
         run: pipx run build --sdist
 
-      - uses: actions/upload-artifact@v3
+      - uses: actions/upload-artifact@v4
         with:
+          name: sdist
           path: dist/*.tar.gz
 
   upload_pypi:
@@ -77,12 +79,14 @@ jobs:
     # alternatively, to publish when a GitHub Release is created, use the following rule:
     # if: github.event_name == 'release' && github.event.action == 'published'
     steps:
-      - uses: actions/download-artifact@v3
+      - uses: actions/download-artifact@v4
         with:
-          # unpacks default artifact into dist/
-          # if `name: artifact` is omitted, the action will create extra parent dir
-          name: artifact
+          # v4 requires unique names per upload (unlike v3, which merged same-named
+          # artifacts), so build_wheels/build_sdist upload under distinct names and
+          # this flattens them all into dist/
           path: dist
+          pattern: "*"
+          merge-multiple: true
 
       - uses: pypa/gh-action-pypi-publish@v1.5.0
         with: