fix: BED-8163 revert artifact actions to v4 to fix release signing

[StranDutton]

Resolves: BED-8163

In the 2.12.1-rc1 initial release, the signing step failed due to a breaking change in the newest versions of actions/upload-artifact and actions/download-artifact - there is some additional work we need to do in the pipeline to support the breaking changes. This will require another ticket to go back and update the versions as well as the pipeline.

Summary by CodeRabbit

• Chores
  • Updated CI/CD workflow action versions to maintain compatibility and security standards.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 33674efd-249d-4758-9ae9-07379a05b7e6

📥 Commits

Reviewing files that changed from the base of the PR and between 1e211df and dd4662b.

📒 Files selected for processing (2)

• .github/workflows/build.yml
• .github/workflows/publish.yml

---

Walkthrough

GitHub Actions workflow files are updated to use newer pinned versions of artifact handling actions. The build.yml workflow updates the artifact upload action version, while publish.yml updates both artifact upload and download action SHAs. No application logic or functionality is modified.

Changes

Cohort / File(s)	Summary
GitHub Actions Artifact Handling .github/workflows/build.yml, .github/workflows/publish.yml	Updates pinned versions/SHAs for actions/upload-artifact and actions/download-artifact actions used in CI workflows for managing build artifacts.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~8 minutes

Poem

🐰 Our workflows now dance with newer tools so bright,
The artifact actions take flight through the night,
Version pins updated, the pipeline runs true,
Progress in config, our CI shines anew! 🚀

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately describes the main change: reverting artifact actions to v4 to fix release signing, which directly corresponds to the modifications in the workflows.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch BED-8163-revert-artifact-actions-to-v4

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Review rate limit: 7/8 reviews remaining, refill in 7 minutes and 30 seconds.}

_{Comment @coderabbitai help to get the list of available commands and usage tips.}