build: update upload-artifact and download-artifact

.github/workflows/release.yml

@@ -1,9 +1,13 @@
+# Use https://app.stepsecurity.io/ to improve workflow security
 name: Create Release
 
 on:
   push:
     tags: [ "v*.*.*" ]
 
+permissions:
+  contents: read
+
 jobs:
   testing:
     name: Testing
@@ -13,18 +17,20 @@ jobs:
         os: [ubuntu-latest, macos-latest, windows-latest]
     steps:
     - name: Set up Go 1.x
-      uses: actions/setup-go@v4
+      uses: actions/setup-go@v5
       with:
         go-version: stable
       id: go
 
     - name: Check out code into the Go module directory
-      uses: actions/checkout@v2
+      uses: actions/checkout@v3
 
     - name: Check
       run: make check
 
   create_release:
+    permissions:
+      contents: write
     name: Create Release
     needs: [testing]
     runs-on: ubuntu-latest
@@ -43,12 +49,15 @@ jobs:
       run: echo "${{ steps.create_release.outputs.upload_url }}" > release_url.txt
 
     - name: Save Release URL File for publish
-      uses: actions/upload-artifact@v1
+      uses: actions/upload-artifact@v4
       with:
         name: release_url
         path: release_url.txt
+        retention-days: 1
 
   publish:
+    permissions:
+      contents: write
     name: Publish
     needs: [testing, create_release]
     runs-on: ${{ matrix.os }}
@@ -57,18 +66,19 @@ jobs:
         os: [ubuntu-latest, macos-latest, windows-latest]
     steps:
     - name: Set up Go 1.x
-      uses: actions/setup-go@v4
+      uses: actions/setup-go@v5
       with:
         go-version: stable
       id: go
 
     - name: Check out code into the Go module directory
-      uses: actions/checkout@v2
+      uses: actions/checkout@v3
 
     - name: Load Release URL File from release job
-      uses: actions/download-artifact@v1
+      uses: actions/download-artifact@v4
       with:
         name: release_url
+        path: release_url.txt
 
     - name: Distribute
       run: make dist
@@ -77,13 +87,14 @@ jobs:
       id: get_release_info
       shell: bash
       run: |
-        value=`cat release_url/release_url.txt`
+        ls -lR
+        value=`cat release_url.txt`
         echo ::set-output name=upload_url::$value
       env:
         TAG_REF_NAME: ${{ github.ref }}
         REPOSITORY_NAME: ${{ github.repository }}
 
-    - name: Upload Linux Binary
+    - name: Upload Linux Server Binary
       if: runner.os == 'Linux'
       uses: actions/upload-release-asset@v1
       env:
@@ -94,7 +105,7 @@ jobs:
         asset_name: metro2-linux-amd64
         asset_content_type: application/octet-stream
 
-    - name: Upload macOS Binary
+    - name: Upload macOS Server Binary
       if: runner.os == 'macOS'
       uses: actions/upload-release-asset@v1
       env:
@@ -105,7 +116,7 @@ jobs:
         asset_name: metro2-darwin-amd64
         asset_content_type: application/octet-stream
 
-    - name: Upload Windows Binary
+    - name: Upload Windows Server Binary
       if: runner.os == 'Windows'
       uses: actions/upload-release-asset@v1
       env:
@@ -122,13 +133,13 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Set up Go 1.x
-      uses: actions/setup-go@v4
+      uses: actions/setup-go@v5
       with:
         go-version: stable
       id: go
 
     - name: Check out code into the Go module directory
-      uses: actions/checkout@v2
+      uses: actions/checkout@v3
 
     - name: Docker
       run: make docker