GeezerVison

Backport of #27261 to release/v7.6.7

Triggered by Aditya Patwardhan (@adityapatwardhan) on behalf of @app/dependabot

Original CL Label: CL-BuildPackaging

/cc @PowerShell/powershell-maintainers

Impact

REQUIRED: Choose either Tooling Impact or Customer Impact (or both). At least one checkbox must be selected.

Tooling Impact

• Required tooling change
• Optional tooling change (include reasoning)

Required tooling update to keep release/v7.6.7 macOS CI, Windows packaging, security scorecard, and xUnit workflows on actions/upload-artifact v7.0.1.

Customer Impact

• Customer reported
• Found internally

Regression

REQUIRED: Check exactly one box.

• Yes
• No

This is not a regression.

Testing

The original dependency update was validated on master. The backport cherry-picked cleanly. Targeted validation confirmed exactly the four expected GitHub workflow files changed, each replacing the actions/upload-artifact v7.0.0 pinned SHA with the v7.0.1 pinned SHA, and git diff --check upstream/release/v7.6.7...HEAD passed with no whitespace errors. Full workflow execution is deferred to required PR CI.

Risk

REQUIRED: Check exactly one box.

• High
• Medium
• Low

High risk because this updates a GitHub Action used by macOS CI, Windows packaging, security scorecards, and xUnit workflows on release builds. The change is narrowly scoped to the immutable actions/upload-artifact SHA and version comment, and the same update has already been validated on master and backported to other supported release branches.