build(deps): update github actions (main)

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/upload-artifact	action	patch	v7.0.0 → v7.0.1
pypa/gh-action-pypi-publish	action	minor	v1.13.0 → v1.14.0
release-drafter/release-drafter	action	patch	v7.3.0 → v7.3.1
zizmorcore/zizmor-action	action	patch	v0.5.2 → v0.5.6

---

Release Notes

actions/upload-artifact (actions/upload-artifact)

v7.0.1

Compare Source

What's Changed

• Update the readme with direct upload details by @​danwkennedy in #​795
• Readme: bump all the example versions to v7 by @​danwkennedy in #​796
• Include changes in typespec/ts-http-runtime 0.3.5 by @​yacaovsnc in #​797

Full Changelog: actions/upload-artifact@v7...v7.0.1

pypa/gh-action-pypi-publish (pypa/gh-action-pypi-publish)

v1.14.0

Compare Source

Audit your supply chain regularly!

✨ What's Changed

The main change in this release is that verbose and print-hash inputs are now on by default. This was contributed by @​whitequark💰 in #​397.

📝 Docs

@​woodruffw💰 updated the mentions of PEP 740 to stop implying that it might be experimental (it hasn't been for quite a while!) in #​388 and @​him2him2💰 brushed up some grammar in the README and SECURITY docs via #​395.

🛠️ Internal Updates

@​woodruffw💰 bumped sigstore and pypi-attestations in the lock file (#​391) and @​webknjaz💰 added infra for using type annotations in the project (#​381).

💪 New Contributors

• @​him2him2 made their first contribution in #​395
• @​whitequark made their first contribution in #​397

🪞 Full Diff: pypa/gh-action-pypi-publish@v1.13.0...v1.14.0

🧔‍♂️ Release Manager: @​webknjaz 🇺🇦

🙏 Special Thanks to @​facutuesca💰 and @​woodruffw💰 for helping maintain this project when I can't!

💬 Discuss on Bluesky 🦋, on Mastodon 🐘 and on GitHub.

release-drafter/release-drafter (release-drafter/release-drafter)

v7.3.1

Compare Source

What's Changed

Bug Fixes

• fix: output name and tag_name in dry-run mode (#​1625) @​cchanche

Maintenance

• chore(deps): update graphql-codegen to 7.0.0 (#​1619) @​renovate[bot]
• chore(deps): update dependency nock to 14.0.15 (#​1609) @​renovate[bot]
• chore(deps): update graphql-codegen (#​1615) @​renovate[bot]
• chore(deps): update dependency typescript to 6.0.3 (#​1610) @​renovate[bot]
• ci(deps): update actions/download-artifact action to v8.0.1 (#​1620) @​renovate[bot]
• chore(deps): update dependency @​types/node to 24.12.3 (#​1608) @​renovate[bot]
• chore(deps): update vitest to 4.1.5 (#​1612) @​renovate[bot]
• chore(deps): update dependency @​biomejs/biome to 2.4.15 (#​1607) @​renovate[bot]
• chore(deps): update dependency vite to 8.0.11 (#​1611) @​renovate[bot]
• ci(deps): pin dependencies (#​1606) @​renovate[bot]

Dependency Updates

8 changes

• chore(deps): update node.js to v24.15.0 (#​1616) @​renovate[bot]
• chore(deps): update vite to v8.0.13 and vitest to v4.1.6 (#​1624) @​cchanche
• fix(deps): update dependency semver to 7.8.0 (#​1622) @​renovate[bot]
• chore(deps): update npm tool constraint to 11.14.1 (#​1617) @​renovate[bot]
• fix(deps): update dependency zod to 4.4.3 (#​1618) @​renovate[bot]
• fix(deps): update actions (#​1613) @​renovate[bot]
• chore(deps): update dependency @​biomejs/biome to 2.4.15 (#​1607) @​renovate[bot]
• fix(deps): update dependency yaml to 2.8.4 (#​1614) @​renovate[bot]

Full Changelog: release-drafter/release-drafter@v7.3.0...v7.3.1

zizmorcore/zizmor-action (zizmorcore/zizmor-action)

v0.5.6

Compare Source

• 1.25.2 is now available via the action
• 1.25.2 is now the default version of zizmor used by the action

v0.5.5

Compare Source

This is a no-op release.

v0.5.4

Compare Source

• 1.25.0 is now available via the action
• 1.25.0 is now the default version of zizmor used by the action

v0.5.3

Compare Source

What's Changed

• 1.24.0 and 1.24.1 are now available via the action
• 1.24.1 is now the default version of zizmor used by the action

Full Changelog: zizmorcore/zizmor-action@v0.5.2...v0.5.3

---

Configuration

📅 Schedule: (in timezone Etc/UTC)

• Branch creation
  • "every weekend"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.