Bump the github-actions group with 2 updates (#219)

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

.github/workflows/publish.yml

@@ -32,7 +32,7 @@ jobs:
           echo "version=$version" >> "$GITHUB_OUTPUT"
 
       - name: Upload package
-        uses: actions/upload-artifact@v5
+        uses: actions/upload-artifact@v6
         with:
           name: package-distributions
           path: dist/
@@ -50,7 +50,7 @@ jobs:
 
     steps:
     - name: Download package
-      uses: actions/download-artifact@v6
+      uses: actions/download-artifact@v7
       with:
         name: package-distributions
         path: dist/