Update `actions/upload-artifact` to v4

[targos]

diagnostics/.github/workflows/scorecards.yml

Line 61 in 7f106c1

uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3

Version 3 will stop working on January 30th, 2025: https://github.blog/changelog/2024-04-16-deprecation-notice-v3-of-the-artifact-actions/

[Qard]

That file seems to be generated by stepsecurity.io. Might need to check with them if there's a reason why it's version-locked and has not been updated.

cc @RafaelGSS Seems you are the committer on that. Do you know if we can just update that?

[RafaelGSS]

cc: @UlisesGascon @nodejs/security-wg

I'm almost sure we can update that. I believe dependabot is just not working on this repository?

[Qard]

Quite possibly it was never configured given there's no code dependencies in this repo, it's all just text content. 🤔