ci: bump actions to Node 24 lines (checkout v6, upload-artifact v7, download-artifact v8, setup-gradle v6)

actions/{upload,download}-artifact@v4 target deprecated Node 20 and
were being force-run on Node 24; these majors are Node 24 native.
Inputs used (name/path/if-no-files-found) are unchanged across the
bumps.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

Author: adrienlacombe

.github/workflows/android-apk.yml

@@ -32,7 +32,7 @@ jobs:
       run:
         working-directory: android_dashboard
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
 
       - name: Set up JDK
         uses: actions/setup-java@v5
@@ -41,13 +41,13 @@ jobs:
           java-version: "17"
 
       - name: Set up Gradle
-        uses: gradle/actions/setup-gradle@v4
+        uses: gradle/actions/setup-gradle@v6
 
       - name: Build debug APK
         run: ./gradlew :app:assembleDebug --no-daemon
 
       - name: Upload debug APK
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: sandboxed-dashboard-debug-apk
           path: android_dashboard/app/build/outputs/apk/debug/app-debug.apk
@@ -63,7 +63,7 @@ jobs:
       run:
         working-directory: android_dashboard
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
 
       - name: Set up JDK
         uses: actions/setup-java@v5
@@ -72,7 +72,7 @@ jobs:
           java-version: "17"
 
       - name: Set up Gradle
-        uses: gradle/actions/setup-gradle@v4
+        uses: gradle/actions/setup-gradle@v6
 
       - name: Decode release keystore
         env:
@@ -122,7 +122,7 @@ jobs:
           cp "${apk_path}" "../release/sandboxed-dashboard-${GITHUB_REF_NAME}.apk"
 
       - name: Upload release APK artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: sandboxed-dashboard-release-apk
           path: release/*.apk
@@ -137,7 +137,7 @@ jobs:
       contents: write
     steps:
       - name: Download release APK artifact
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v8
         with:
           name: sandboxed-dashboard-release-apk
           path: dist

.github/workflows/ci-debounced.yml.example

@@ -75,7 +75,7 @@ jobs:
         pr_number: ${{ fromJson(needs.check-stale-prs.outputs.pr_numbers) }}
     steps:
       - name: Checkout PR
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           ref: refs/pull/${{ matrix.pr_number }}/head
 

.github/workflows/ci.yml

@@ -31,7 +31,7 @@ jobs:
     # Skip CI on draft PRs unless explicitly requested
     if: github.event.pull_request.draft == false || github.event_name == 'push' || github.event_name == 'schedule'
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
 
       - name: Install Rust toolchain
         uses: dtolnay/rust-toolchain@stable
@@ -63,7 +63,7 @@ jobs:
     # Skip CI on draft PRs unless explicitly requested
     if: github.event.pull_request.draft == false || github.event_name == 'push' || github.event_name == 'schedule'
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
 
       - name: Install Rust toolchain
         uses: dtolnay/rust-toolchain@stable
@@ -97,7 +97,7 @@ jobs:
     # Skip CI on draft PRs unless explicitly requested
     if: github.event.pull_request.draft == false || github.event_name == 'push' || github.event_name == 'schedule'
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
 
       - name: Install Rust toolchain
         uses: dtolnay/rust-toolchain@stable
@@ -113,7 +113,7 @@ jobs:
     # Skip CI on draft PRs unless explicitly requested
     if: github.event.pull_request.draft == false || github.event_name == 'push' || github.event_name == 'schedule'
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
 
       - name: Install Rust toolchain
         uses: dtolnay/rust-toolchain@stable
@@ -145,7 +145,7 @@ jobs:
     # Skip CI on draft PRs unless explicitly requested
     if: github.event.pull_request.draft == false || github.event_name == 'push' || github.event_name == 'schedule'
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
 
       - name: Validate capability matrix and surface contract evidence
         run: scripts/check-capability-matrix.sh
@@ -159,7 +159,7 @@ jobs:
       run:
         working-directory: dashboard
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
 
       - name: Setup Bun
         uses: oven-sh/setup-bun@v2