ci: bump actions/upload-artifact from 4 to 6 #4

	name: QA

	on:
	push:
	branches: [main]
	pull_request:
	branches: [main]

	env:
	CARGO_TERM_COLOR: always

	jobs:
	test:
	runs-on: macos-latest
	steps:
	- uses: actions/checkout@v4
	- uses: dtolnay/rust-toolchain@stable
	- uses: Swatinem/rust-cache@v2
	- name: Run tests
	run: cargo test --verbose

	lint:
	runs-on: macos-latest
	steps:
	- uses: actions/checkout@v4
	- uses: dtolnay/rust-toolchain@stable
	with:
	components: clippy, rustfmt
	- uses: Swatinem/rust-cache@v2
	- name: Check formatting
	run: cargo fmt --check
	- name: Run clippy
	run: cargo clippy -- -D warnings

	build:
	runs-on: macos-latest
	steps:
	- uses: actions/checkout@v4
	- uses: dtolnay/rust-toolchain@stable
	- uses: Swatinem/rust-cache@v2
	- name: Build
	run: cargo build --verbose
	- name: Build release
	run: cargo build --release --verbose

	# SCA: Dependency vulnerability scanning
	security-audit:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	- name: Install cargo-audit
	run: cargo install cargo-audit --locked
	- name: Run security audit
	run: cargo audit --deny warnings

	# Secrets scanning
	secrets-scan:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	with:
	fetch-depth: 0
	- name: Run gitleaks
	uses: gitleaks/gitleaks-action@v2
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

	# License and supply chain compliance
	dependency-check:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	- name: Install cargo-deny
	run: cargo install cargo-deny --locked
	- name: Check dependencies
	run: cargo deny check

Provide feedback