[github-actions] Bump the non-major-dependencies group with 2 updates (…

…#1093)

Bumps the non-major-dependencies group with 2 updates:
[actions/upload-artifact](https://github.com/actions/upload-artifact)
and [changesets/action](https://github.com/changesets/action).

Updates `actions/upload-artifact` from 4.3.5 to 4.4.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/upload-artifact/releases">actions/upload-artifact's
releases</a>.</em></p>
<blockquote>
<h2>v4.4.0</h2>
<h2>Notice: Breaking Changes ⚠️</h2>
<p>We will no longer include hidden files and folders by default in the
<code>upload-artifact</code> action of this version. This reduces the
risk that credentials are accidentally uploaded into artifacts.
Customers who need to continue to upload these files can use a new
option, <code>include-hidden-files</code>, to continue to do so.</p>
<p>See <a
href="https://github.blog/changelog/2024-08-19-notice-of-upcoming-deprecations-and-breaking-changes-in-github-actions-runners/">&quot;Notice
of upcoming deprecations and breaking changes in GitHub Actions
runners&quot;</a> changelog and <a
href="https://redirect.github.com/actions/upload-artifact/issues/602">this
issue</a> for more details.</p>
<h2>What's Changed</h2>
<ul>
<li>Exclude hidden files by default by <a
href="https://github.com/joshmgross"><code>@​joshmgross</code></a> in <a
href="https://redirect.github.com/actions/upload-artifact/pull/598">actions/upload-artifact#598</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/upload-artifact/compare/v4.3.6...v4.4.0">https://github.com/actions/upload-artifact/compare/v4.3.6...v4.4.0</a></p>
<h2>v4.3.6</h2>
<h2>What's Changed</h2>
<ul>
<li>Revert to <code>@​actions/artifact</code> 2.1.8 by <a
href="https://github.com/robherley"><code>@​robherley</code></a> in <a
href="https://redirect.github.com/actions/upload-artifact/pull/594">actions/upload-artifact#594</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/upload-artifact/compare/v4...v4.3.6">https://github.com/actions/upload-artifact/compare/v4...v4.3.6</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/upload-artifact/commit/50769540e7f4bd5e21e526ee35c689e35e0d6874"><code>5076954</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/upload-artifact/issues/598">#598</a>
from actions/joshmgross/exclude-hidden-files</li>
<li><a
href="https://github.com/actions/upload-artifact/commit/d52396ac5d312b1bda1b9fe2ae55d862c65abd68"><code>d52396a</code></a>
Add a warning about enabling <code>include-hidden-files</code></li>
<li><a
href="https://github.com/actions/upload-artifact/commit/710f36207581d49e465ccbed3e007c317290fe11"><code>710f362</code></a>
Remove &quot;merged&quot; from <code>include-hidden-files</code> input
description</li>
<li><a
href="https://github.com/actions/upload-artifact/commit/3b315f26f6f828f74089e1863e67e60e48e37563"><code>3b315f2</code></a>
<code>npm run release</code> again 🙂</li>
<li><a
href="https://github.com/actions/upload-artifact/commit/3be2180eb79b56341b1b127ca06a5adba2a5a3e4"><code>3be2180</code></a>
Remove another trailing comma</li>
<li><a
href="https://github.com/actions/upload-artifact/commit/453e8d0a40444939146df5febed0b1221b9dd073"><code>453e8d0</code></a>
Update glob license</li>
<li><a
href="https://github.com/actions/upload-artifact/commit/0a398c14804ead69f18a166f0a99f91239261ee5"><code>0a398c1</code></a>
<code>npm run release</code></li>
<li><a
href="https://github.com/actions/upload-artifact/commit/a0c40cf60283f329afac2bc0fa77f1a59fa11e6e"><code>a0c40cf</code></a>
Update to latest <code>@actions/glob</code> and fix tests</li>
<li><a
href="https://github.com/actions/upload-artifact/commit/acb59e47763b6e601a344d04cf3c082ee336b709"><code>acb59e4</code></a>
<code>lint</code></li>
<li><a
href="https://github.com/actions/upload-artifact/commit/cb6558bb10fe4afe4054d0be4b3136e673eb5e7f"><code>cb6558b</code></a>
Exclude hidden files by default</li>
<li>Additional commits viewable in <a
href="https://github.com/actions/upload-artifact/compare/89ef406dd8d7e03cfd12d9e0a4a378f454709029...50769540e7f4bd5e21e526ee35c689e35e0d6874">compare
view</a></li>
</ul>
</details>
<br />

Updates `changesets/action` from 1.4.7 to 1.4.8
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/changesets/action/releases">changesets/action's
releases</a>.</em></p>
<blockquote>
<h2>v1.4.8</h2>
<h3>Patch Changes</h3>
<ul>
<li>
<p><a
href="https://redirect.github.com/changesets/action/pull/393">#393</a>
<a
href="https://github.com/changesets/action/commit/48ab0d2f2e77ae169182d022591ef5c18c931ff2"><code>48ab0d2</code></a>
Thanks <a href="https://github.com/s0"><code>@​s0</code></a>! - Ensure
the PR remains open when updated</p>
</li>
<li>
<p><a
href="https://redirect.github.com/changesets/action/pull/393">#393</a>
<a
href="https://github.com/changesets/action/commit/48ab0d2f2e77ae169182d022591ef5c18c931ff2"><code>48ab0d2</code></a>
Thanks <a href="https://github.com/s0"><code>@​s0</code></a>! - Switch
to cheaper API for querying existing PRs</p>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/changesets/action/blob/main/CHANGELOG.md">changesets/action's
changelog</a>.</em></p>
<blockquote>
<h1><code>@​changesets/action</code></h1>
<h2>1.4.8</h2>
<h3>Patch Changes</h3>
<ul>
<li>
<p><a
href="https://redirect.github.com/changesets/action/pull/393">#393</a>
<a
href="https://github.com/changesets/action/commit/48ab0d2f2e77ae169182d022591ef5c18c931ff2"><code>48ab0d2</code></a>
Thanks <a href="https://github.com/s0"><code>@​s0</code></a>! - Ensure
the PR remains open when updated</p>
</li>
<li>
<p><a
href="https://redirect.github.com/changesets/action/pull/393">#393</a>
<a
href="https://github.com/changesets/action/commit/48ab0d2f2e77ae169182d022591ef5c18c931ff2"><code>48ab0d2</code></a>
Thanks <a href="https://github.com/s0"><code>@​s0</code></a>! - Switch
to cheaper API for querying existing PRs</p>
</li>
</ul>
<h2>1.4.7</h2>
<h3>Patch Changes</h3>
<ul>
<li><a
href="https://redirect.github.com/changesets/action/pull/255">#255</a>
<a
href="https://github.com/changesets/action/commit/f2660aa7e78365f53dbeb4cfa774c1499ec6483a"><code>f2660aa</code></a>
Thanks <a
href="https://github.com/ernestognw"><code>@​ernestognw</code></a>! -
Allow customize PR <code>branch</code> field</li>
</ul>
<h2>1.4.6</h2>
<h3>Patch Changes</h3>
<ul>
<li><a
href="https://redirect.github.com/changesets/action/pull/350">#350</a>
<a
href="https://github.com/changesets/action/commit/9385be9e757839189ea5ee63ec4e3caa8a6ca71b"><code>9385be9</code></a>
Thanks <a href="https://github.com/m-shaka"><code>@​m-shaka</code></a>!
- Bump the used node.js from 16 to 20</li>
</ul>
<h2>1.4.5</h2>
<h3>Patch Changes</h3>
<ul>
<li><a
href="https://redirect.github.com/changesets/action/pull/282">#282</a>
<a
href="https://github.com/changesets/action/commit/eb19e25e7797cf33dc2de4caa071e85a8057a0f0"><code>eb19e25</code></a>
Thanks <a
href="https://github.com/mark-omarov"><code>@​mark-omarov</code></a>! -
Updated a few dependencies to patch the security vulnerabilities that
were reported for their older versions.</li>
</ul>
<h2>1.4.4</h2>
<h3>Patch Changes</h3>
<ul>
<li><a
href="https://redirect.github.com/changesets/action/pull/291">#291</a>
<a
href="https://github.com/changesets/action/commit/db8a1099bc0ba1dd6f46a5b9df4212e4f69e78c9"><code>db8a109</code></a>
Thanks <a href="https://github.com/varl"><code>@​varl</code></a>! - Wire
up <a
href="https://github.com/octokit/plugin-throttling.js"><code>@octokit/plugin-throttling</code></a>
with all GitHub Octokit instances</li>
</ul>
<h2>1.4.3</h2>
<h3>Patch Changes</h3>
<ul>
<li><a
href="https://redirect.github.com/changesets/action/pull/289">#289</a>
<a
href="https://github.com/changesets/action/commit/8b2818674de86a7fc69aebb9ed6b486ee32eb96e"><code>8b28186</code></a>
Thanks <a href="https://github.com/varl"><code>@​varl</code></a>! - Use
logging provided by <code>@actions/core</code></li>
</ul>
<h2>1.4.2</h2>
<h3>Patch Changes</h3>
<ul>
<li>
<p><a
href="https://redirect.github.com/changesets/action/pull/286">#286</a>
<a
href="https://github.com/changesets/action/commit/225a1e8cbcabb7b585174ba0ad806549db40d4cd"><code>225a1e8</code></a>
Thanks <a href="https://github.com/varl"><code>@​varl</code></a>! - This
patch implements the <a
href="https://github.com/octokit/plugin-throttling.js"><code>@octokit/plugin-throttling</code></a>
plugin and <a
href="https://github.com/actions/toolkit/tree/457303960f03375db6f033e214b9f90d79c3fe5c/packages/github#extending-the-octokit-instance">wires
it up with the internal GitHub Octokit instance</a>.</p>
<p>This plugin is recommended by <a
href="://octokit.github.io/rest.js/v19#throttling">the Octokit docs</a>
as it implements all the GitHub <a
href="https://docs.github.com/en/rest/guides/best-practices-for-integrators?apiVersion=2022-11-28">best
practices for integrators</a>.</p>
<p>This should help with <code>changesets/action</code> gitting spurious
secondary rate limits and failing CI jobs, for which the only known
workaround is to simply re-run the job.</p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/changesets/action/commit/3de3850952bec538fde60aac71731376e57b9b57"><code>3de3850</code></a>
v1.4.8</li>
<li><a
href="https://github.com/changesets/action/commit/50750fa876cc1e54c7cb972db5e2f7271fc53d99"><code>50750fa</code></a>
Version Packages (<a
href="https://redirect.github.com/changesets/action/issues/394">#394</a>)</li>
<li><a
href="https://github.com/changesets/action/commit/48ab0d2f2e77ae169182d022591ef5c18c931ff2"><code>48ab0d2</code></a>
Switch to pull request list API instead of search (<a
href="https://redirect.github.com/changesets/action/issues/393">#393</a>)</li>
<li><a
href="https://github.com/changesets/action/commit/89b41e6c69b137c466a86516cc9213950bbcd932"><code>89b41e6</code></a>
Fix typos in README.md (<a
href="https://redirect.github.com/changesets/action/issues/384">#384</a>)</li>
<li><a
href="https://github.com/changesets/action/commit/c62ef9792fd0502c89479ed856efe28575010472"><code>c62ef97</code></a>
Use latest versions of checkout and setup-node actions (<a
href="https://redirect.github.com/changesets/action/issues/359">#359</a>)</li>
<li>See full diff in <a
href="https://github.com/changesets/action/compare/aba318e9165b45b7948c60273e0b72fce0a64eb9...3de3850952bec538fde60aac71731376e57b9b57">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

.github/workflows/benchmark.yml

@@ -53,7 +53,7 @@ jobs:
             BENCHER_API_TOKEN=${{ secrets.BENCHER_API_TOKEN }}
 
       - name: "Upload Benchmarking Data"
-        uses: "actions/upload-artifact@89ef406dd8d7e03cfd12d9e0a4a378f454709029"
+        uses: "actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874"
         with:
           name: "benchmarking-data"
           path: "target/iai"

.github/workflows/publish.yml

@@ -42,7 +42,7 @@ jobs:
 
       - name: "Create/Update Changesets Pull Request"
         id: "runChangesets"
-        uses: "changesets/action@aba318e9165b45b7948c60273e0b72fce0a64eb9"
+        uses: "changesets/action@3de3850952bec538fde60aac71731376e57b9b57"
         with:
           title: "Bump Slang Version"
           commit: "Bump Slang Version"