chore(deps): bump the actions group with 3 updates (#6000)

.github/workflows/nightlies.yml

diff --git a/.github/workflows/nightlies.yml b/.github/workflows/nightlies.yml
index 9b4f933..98211ca 100644
--- a/.github/workflows/nightlies.yml
+++ b/.github/workflows/nightlies.yml
@@ -33,7 +33,7 @@
           nox -s build
           nox -s build_global
 
-      - uses: actions/upload-artifact@v6
+      - uses: actions/upload-artifact@v7
         with:
           name: Packages
           path: dist/*
@@ -44,7 +44,7 @@
     needs: [build_wheel]
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/download-artifact@v7
+      - uses: actions/download-artifact@v8
         with:
           name: Packages
           path: dist

.github/workflows/pip.yml

diff --git a/.github/workflows/pip.yml b/.github/workflows/pip.yml
index b7555a5..981884a 100644
--- a/.github/workflows/pip.yml
+++ b/.github/workflows/pip.yml
@@ -72,13 +72,13 @@
       run: twine check dist/*
 
     - name: Save standard package
-      uses: actions/upload-artifact@v6
+      uses: actions/upload-artifact@v7
       with:
         name: standard
         path: dist/pybind11-*
 
     - name: Save global package
-      uses: actions/upload-artifact@v6
+      uses: actions/upload-artifact@v7
       with:
         name: global
         path: dist/*global-*
@@ -100,10 +100,10 @@
 
     steps:
     # Downloads all to directories matching the artifact names
-    - uses: actions/download-artifact@v7
+    - uses: actions/download-artifact@v8
 
     - name: Generate artifact attestation for sdist and wheel
-      uses: actions/attest-build-provenance@v3
+      uses: actions/attest-build-provenance@v4
       with:
         subject-path: "*/pybind11*"