Bump the github-actions group with 4 updates (#148)

* Bump the github-actions group with 4 updates

Bumps the github-actions group with 4 updates: [actions/upload-artifact](https://github.com/actions/upload-artifact), [actions/download-artifact](https://github.com/actions/download-artifact), [bruceadams/get-release](https://github.com/bruceadams/get-release) and [WebFreak001/deploy-nightly](https://github.com/webfreak001/deploy-nightly).


Updates `actions/upload-artifact` from 3 to 4
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@v3...v4)

Updates `actions/download-artifact` from 3 to 4
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@v3...v4)

Updates `bruceadams/get-release` from 1.2.3 to 1.3.2
- [Release notes](https://github.com/bruceadams/get-release/releases)
- [Commits](bruceadams/get-release@v1.2.3...v1.3.2)

Updates `WebFreak001/deploy-nightly` from 2.0.0 to 3.1.0
- [Release notes](https://github.com/webfreak001/deploy-nightly/releases)
- [Commits](WebFreak001/deploy-nightly@v2.0.0...v3.1.0)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/download-artifact
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: bruceadams/get-release
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: WebFreak001/deploy-nightly
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>

* Remove token usage as instructed

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: jaimergp <jaimergp@users.noreply.github.com>

.github/workflows/make_bundle_conda.yml

@@ -132,7 +132,7 @@ jobs:
           echo "name=${name}" >> $GITHUB_OUTPUT
 
       - name: Upload packages as artifacts
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         with:
           name: ${{ steps.artifact-id.outputs.name }}
           path: |
@@ -273,7 +273,7 @@ jobs:
           python -m pip install -e . --no-deps
 
       - name: Download local build artifacts (napari)
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v4
         with:
           name: ${{ needs.packages.outputs.artifact-id }}
           path: ${{ env.CONDA_BLD_PATH }}/noarch
@@ -414,7 +414,7 @@ jobs:
           echo "licenses_artifact=${licenses_zip_path}" >> $GITHUB_OUTPUT
 
       - name: Upload License Artifact
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         with:
           path: ${{ env.LICENSES_ARTIFACT_PATH }}
           name: ${{ env.LICENSES_ARTIFACT_NAME }}
@@ -430,7 +430,7 @@ jobs:
           echo "pkgs_list_artifact=${pkgs_list_zip_path}" >> $GITHUB_OUTPUT
 
       - name: Upload list of packages artifact
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         with:
           path: ${{ env.PKGS_LIST_ARTIFACT_PATH }}
           name: ${{ env.PKGS_LIST_ARTIFACT_NAME }}
@@ -484,7 +484,7 @@ jobs:
           spctl --assess -vv --type install "$INSTALLER_PATH" 2>&1 | tee /dev/stderr | grep accepted
 
       - name: Upload Artifact
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         # CI artifact uploads only on manual runs
         if: inputs.event_name == 'workflow_dispatch' || github.event_name == 'workflow_dispatch'
         with:
@@ -494,7 +494,7 @@ jobs:
       - name: Get Release
         if: inputs.event_name == 'push' && startsWith(github.ref, 'refs/tags/v')
         id: get_release
-        uses: bruceadams/get-release@v1.2.3
+        uses: bruceadams/get-release@v1.3.2
 
       - name: Upload Release Asset
         if: inputs.event_name == 'push' && startsWith(github.ref, 'refs/tags/v')
@@ -507,9 +507,7 @@ jobs:
 
       - name: Upload Nightly Build Asset
         if: ${{ inputs.event_name == 'schedule' }}
-        uses: WebFreak001/deploy-nightly@v2.0.0
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        uses: WebFreak001/deploy-nightly@v3.1.0
         with:
           # nightly build release from https://api.github.com/repos/napari/napari/releases
           upload_url: https://uploads.github.com/repos/napari/napari/releases/34273071/assets{?name,label}