From ca39c104b8b1af61465044a169252ce805039c48 Mon Sep 17 00:00:00 2001
From: Marek Kubica <marek@tarides.com>
Date: Thu, 12 Mar 2026 14:30:26 +0100
Subject: [PATCH] Update actions

The download-artifact action uses the deprecated Node 20 runtime, this
bumps it to the most recent version.

The attestation action uses the Node 20 runtime and has been deprecated
itself, this updates it to its successor.

Signed-off-by: Marek Kubica <marek@tarides.com>
---
 .github/workflows/binary-nightly.yaml | 15 ++++++++-------
 .github/workflows/binary-stable.yaml  | 21 +++++++++++----------
 2 files changed, 19 insertions(+), 17 deletions(-)

diff --git a/.github/workflows/binary-nightly.yaml b/.github/workflows/binary-nightly.yaml
index 791947c..d77056f 100644
--- a/.github/workflows/binary-nightly.yaml
+++ b/.github/workflows/binary-nightly.yaml
@@ -91,7 +91,7 @@ jobs:
 
       - name: Generate artifact attestation
         id: certificate
-        uses: actions/attest-build-provenance@v1
+        uses: actions/attest@v4
         with:
           subject-path: "result/bin/dune"
           show-summary: false
@@ -108,7 +108,7 @@ jobs:
           gzip -9 ~/build/$ARCHIVE_TAR
           rm -rf ~/build/$ARCHIVE_DIR
 
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@v7
         with:
           path: ~/build
           name: ${{ matrix.name }}
@@ -128,16 +128,17 @@ jobs:
     runs-on: ${{ matrix.os }}
     needs: binary
     steps:
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v8
+        with:
+          name: ${{ matrix.name }}
 
       - name: Install newly-built dune
         run: |
+          mkdir -p ~/.local/bin
           DATE=$(date +'%Y-%m-%d')
           ARCHIVE_DIR="dune-$DATE-${{ matrix.name }}"
           ARCHIVE_TARGZ="${ARCHIVE_DIR}.tar.gz"
-          mv ${{ matrix.name }}/$ARCHIVE_TARGZ .
-          tar -xvf $ARCHIVE_TARGZ
-          mkdir -p ~/.local/bin
+          tar xvf $ARCHIVE_TARGZ
           mv ./$ARCHIVE_DIR/dune ~/.local/bin/dune
 
       - name: Checkout
@@ -192,7 +193,7 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v6
 
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v8
         with:
           path: /home/runner/artifacts
 
diff --git a/.github/workflows/binary-stable.yaml b/.github/workflows/binary-stable.yaml
index fc21a9d..5b2d779 100644
--- a/.github/workflows/binary-stable.yaml
+++ b/.github/workflows/binary-stable.yaml
@@ -111,7 +111,7 @@ jobs:
 
       - name: Generate artifact attestation
         id: certificate
-        uses: actions/attest-build-provenance@v1
+        uses: actions/attest@v4
         with:
           subject-path: "result/bin/dune"
           show-summary: false
@@ -130,7 +130,7 @@ jobs:
           gzip -9 ~/build/$ARCHIVE_TAR
           rm -rf ~/build/$ARCHIVE_DIR
 
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@v7
         with:
           path: ~/build
           name: ${{ matrix.name }}
@@ -151,15 +151,16 @@ jobs:
     runs-on: ${{ matrix.os }}
     needs: [check_build, binary]
     steps:
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v8
+        with:
+          name: ${{ matrix.name }}
 
       - name: Install newly-built dune
         run: |
+          mkdir -p ~/.local/bin
           ARCHIVE_DIR="dune-${{ needs.check_build.outputs.release }}-${{ matrix.name }}"
           ARCHIVE_TARGZ="${ARCHIVE_DIR}.tar.gz"
-          mv ${{ matrix.name }}/$ARCHIVE_TARGZ .
-          tar -xvf $ARCHIVE_TARGZ
-          mkdir -p ~/.local/bin
+          tar xvf $ARCHIVE_TARGZ
           mv ./$ARCHIVE_DIR/dune ~/.local/bin/dune
 
       - name: Checkout
@@ -191,13 +192,13 @@ jobs:
       - name: Install dune
         uses: ocaml-dune/setup-dune@v2
 
-      - uses: actions/download-artifact@v4
-        with:
-          path: /home/runner/artifacts
-
       - name: "Install Sandworm deps & build"
         run: dune build
 
+      - uses: actions/download-artifact@v8
+        with:
+          path: /home/runner/artifacts
+
       - name: Move artifacts to scope
         run: mv "/home/runner/artifacts" "."