From fd1f8e92d09176c031c5f9be171e557156f9483b Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 28 Sep 2026 21:32:25 +0000
Subject: [PATCH] Bump the ci-dependencies group across 1 directory with 4
 updates

Bumps the ci-dependencies group with 4 updates in the / directory: [actions/checkout](https://github.com/actions/checkout), [actions/setup-node](https://github.com/actions/setup-node), [actions/upload-artifact](https://github.com/actions/upload-artifact) and [actions/download-artifact](https://github.com/actions/download-artifact).


Updates `actions/checkout` from 4 to 7
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v4...v7)

Updates `actions/setup-node` from 4 to 7
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/v4...v7)

Updates `actions/upload-artifact` from 4 to 7
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v4...v7)

Updates `actions/download-artifact` from 4 to 8
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](https://github.com/actions/download-artifact/compare/v4...v8)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: ci-dependencies
- dependency-name: actions/download-artifact
  dependency-version: '8'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: ci-dependencies
- dependency-name: actions/setup-node
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: ci-dependencies
- dependency-name: actions/upload-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: ci-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/site.yml | 22 +++++++++++-----------
 1 file changed, 11 insertions(+), 11 deletions(-)

diff --git a/.github/workflows/site.yml b/.github/workflows/site.yml
index 9dea51c..539232e 100644
--- a/.github/workflows/site.yml
+++ b/.github/workflows/site.yml
@@ -30,20 +30,20 @@ jobs:
             ca-certificates git python3 pandoc texlive-xetex \
             texlive-fonts-recommended lmodern fonts-texgyre fonts-texgyre-math \
             fonts-dejavu-core fontconfig librsvg2-bin texlive-plain-generic
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       # The checkout belongs to the runner's user, not the container's root,
       # so git refuses the repository to any later step -- make-pdf.py asks it
       # which commit to name on the title page.
       - name: Let git read the checkout
         run: git config --global --add safe.directory "$GITHUB_WORKSPACE"
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v7
         with:
           node-version: 22
       - name: Install the mermaid renderer
         run: npm ci --prefix tools --no-audit --no-fund
       - name: Build the PDF
         run: python3 tools/make-pdf.py -o kladde.pdf
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@v7
         with:
           name: pdf
           path: kladde.pdf
@@ -52,17 +52,17 @@ jobs:
   site:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0 # the pages' dates come from git
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v7
         with:
           node-version: 22
       - name: Build the site
         run: site/build.sh
       - name: Check the site's internal links and anchors
         run: tools/check-site-links.py public
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@v7
         with:
           name: site
           path: public
@@ -71,10 +71,10 @@ jobs:
   examples:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           path: kladde-docs
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           repository: kladde-dev/kladde-rs
           path: kladde-rs
@@ -90,15 +90,15 @@ jobs:
       group: deploy
       cancel-in-progress: false
     steps:
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v8
         with:
           name: site
           path: public
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v8
         with:
           name: pdf
           path: public
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           path: source
           sparse-checkout: site/QUARTZ-LICENSE.txt