Bump the github-actions group across 1 directory with 2 updates

.github/workflows/dotnet-format-apply-changes.yml

@@ -40,7 +40,7 @@ jobs:
       with:
         ref: ${{ env.WORKFLOW_HEAD_SHA }}
     - name: Download dotnet format workflow info artifact
-      uses: dawidd6/action-download-artifact@v6
+      uses: dawidd6/action-download-artifact@v7
       with:
         name:  ${{ env.DOTNET_FORMAT_WORKFLOW_INFO_ARTIFACT }}
         run_id: ${{ github.event.workflow_run.id }}
@@ -118,7 +118,7 @@ jobs:
       run: |
         git checkout -b ${{ steps.commit-info.outputs.branch-name }}
     - name: Download dotnet format changed files
-      uses: dawidd6/action-download-artifact@v6
+      uses: dawidd6/action-download-artifact@v7
       with:
         name:  ${{ env.DOTNET_FORMAT_FILES_ARTIFACT }}
         run_id: ${{ github.event.workflow_run.id }}
@@ -183,7 +183,7 @@ jobs:
         GITHUB_CONTEXT: ${{ toJSON(github) }}
       run: $env:GITHUB_CONTEXT
     - name: Download dotnet format workflow info artifact
-      uses: dawidd6/action-download-artifact@v6
+      uses: dawidd6/action-download-artifact@v7
       with:
         name:  ${{ env.DOTNET_FORMAT_WORKFLOW_INFO_ARTIFACT }}
         run_id: ${{ github.event.workflow_run.id }}
@@ -231,7 +231,7 @@ jobs:
         # PR triggers aren't executed again. See https://docs.github.com/en/actions/using-workflows/triggering-a-workflow#triggering-a-workflow-from-a-workflow
         token: ${{ secrets.PUBLIC_REPO_SCOPE_GH_TOKEN }}
     - name: Download dotnet format changed files
-      uses: dawidd6/action-download-artifact@v6
+      uses: dawidd6/action-download-artifact@v7
       with:
         name:  ${{ env.DOTNET_FORMAT_FILES_ARTIFACT }}
         run_id: ${{ github.event.workflow_run.id }}

.github/workflows/markdown-link-check-handle-result.yml

@@ -56,7 +56,7 @@ jobs:
         GITHUB_CONTEXT: ${{ toJSON(github) }}
       run: $env:GITHUB_CONTEXT
     - name: Download markdown link check workflow info artifact
-      uses: dawidd6/action-download-artifact@v6
+      uses: dawidd6/action-download-artifact@v7
       with:
         name:  ${{ env.MLC_WORKFLOW_INFO_ARTIFACT }}
         run_id: ${{ github.event.workflow_run.id }}

.github/workflows/nuget-publish.yml

@@ -73,15 +73,15 @@ jobs:
         Write-Output "run-id=$runId"
         Write-Output "run-id=$runId" >> $env:GITHUB_OUTPUT
     - name: Download NuGet release info artifact from PR
-      uses: dawidd6/action-download-artifact@v6
+      uses: dawidd6/action-download-artifact@v7
       if: github.event_name == 'pull_request'
       with:
         name:  nuget-release-info
         run_id: ${{ steps.release-info.outputs.run-id }}
     - name: Download NuGet release notes artifact from PR
       id: download-release-notes
       if: github.event_name == 'pull_request'
-      uses: dawidd6/action-download-artifact@v6
+      uses: dawidd6/action-download-artifact@v7
       with:
         name:  ${{ env.CUSTOM_RELEASE_NOTES_ARTIFACT_NAME }}
         run_id: ${{ steps.release-info.outputs.run-id }}
@@ -170,7 +170,7 @@ jobs:
       TESTING_EXTENSIONS_NUGET_BIN_FOLDER : ${{ github.workspace }}/DotNet.Sdk.Extensions.Testing/bin/Release
     steps:
     - name: Download NuGet package artifact
-      uses: dawidd6/action-download-artifact@v6
+      uses: dawidd6/action-download-artifact@v7
       with:
         name:  nuget-packages-and-symbols
         run_id: ${{ needs.workflow-args.outputs.nuget-package-run-id }}

.github/workflows/nuget-release-flow.yml

@@ -59,7 +59,7 @@ jobs:
         Write-Output "run-id=$runId"
         Write-Output "run-id=$runId" >> $env:GITHUB_OUTPUT
     - name: Download NuGet release info artifact
-      uses: dawidd6/action-download-artifact@v6
+      uses: dawidd6/action-download-artifact@v7
       with:
         name:  nuget-release-info
         run_id: ${{ steps.release-info.outputs.run-id }}
@@ -384,7 +384,7 @@ jobs:
     - name: Checkout repository
       uses: actions/checkout@v4
     - name: Download GitHub release info artifact
-      uses: dawidd6/action-download-artifact@v6
+      uses: dawidd6/action-download-artifact@v7
       with:
         name:  github-release-info
         run_id: ${{ github.event.workflow_run.id }}

.github/workflows/pr-test-results-comment.yml

@@ -34,7 +34,7 @@ jobs:
         GITHUB_CONTEXT: ${{ toJSON(github) }}
       run: $env:GITHUB_CONTEXT
     - name: Download artifact
-      uses: dawidd6/action-download-artifact@v6
+      uses: dawidd6/action-download-artifact@v7
       with:
         name:  ${{ env.TEST_RESULTS_ARTIFACT_NAME }}
         run_id: ${{ github.event.workflow_run.id }}

.github/workflows/upload-coverage-to-codecov.yml

@@ -21,19 +21,19 @@ jobs:
       env:
         GITHUB_CONTEXT: ${{ toJSON(github) }}
       run: $env:GITHUB_CONTEXT
-      # Checking out the repo is necessary for the codecov/codecov-action@v4 to work properly. Codecov requires
+      # Checking out the repo is necessary for the codecov/codecov-action@v5 to work properly. Codecov requires
       # the source code to be able to process the coverage file and generate coverage reports.
       # Otherwise the upload step works but the processing of the coverage files fails with the error: "unusable report".
     - name: Checkout repository
       uses: actions/checkout@v4
       with:
         ref: ${{ github.event.workflow_run.head_sha }}
     - name: Download test coverage file
-      uses: dawidd6/action-download-artifact@v6
+      uses: dawidd6/action-download-artifact@v7
       with:
         name:  opencover-test-coverage-file
         run_id: ${{ github.event.workflow_run.id }}
-    # On the codecov/codecov-action@v4 steps below I'm using the override_commit, override_branch
+    # On the codecov/codecov-action@v5 steps below I'm using the override_commit, override_branch
     # and override_pr options to make sure the right information is sent to Codecov.
     #
     # If this wasn't done in a separate workflow from the `Build, test and package` workflow then
@@ -45,7 +45,7 @@ jobs:
     # incorrect for pull requests and one of the issues that it causes is, for instance, the status checks
     # aren't set on PRs because the SHA used for the code coverage upload doesn't point to the PR's SHA.
     - name: Upload test coverage to Codecov
-      uses: codecov/codecov-action@v4
+      uses: codecov/codecov-action@v5
       if: github.event.workflow_run.event != 'pull_request'
       with:
         token: ${{ secrets.CODECOV_TOKEN }} # even though it's not required for public repos it helps with intermittent failures caused by https://community.codecov.com/t/upload-issues-unable-to-locate-build-via-github-actions-api/3954, https://github.com/codecov/codecov-action/issues/598,
@@ -55,7 +55,7 @@ jobs:
         override_commit: '${{ github.event.workflow_run.head_sha }}'
         override_branch: '${{ github.event.workflow_run.head_branch }}'
     - name: Upload test coverage to Codecov
-      uses: codecov/codecov-action@v4
+      uses: codecov/codecov-action@v5
       if: github.event.workflow_run.event == 'pull_request'
       with:
         token: ${{ secrets.CODECOV_TOKEN }} # even though it's not required for public repos it helps with intermittent failures caused by https://community.codecov.com/t/upload-issues-unable-to-locate-build-via-github-actions-api/3954, https://github.com/codecov/codecov-action/issues/598,