Merge pull request apache#384 from apache/dependabot/github_actions/actions/upload-artifact-4.2.0

Bump actions/upload-artifact from 4.0.0 to 4.2.0

Author: garydgregory

.github/workflows/scorecards-analysis.yml

@@ -57,7 +57,7 @@ jobs:
           publish_results: true
 
       - name: "Upload artifact"
-        uses: actions/upload-artifact@c7d193f32edcb7bfad88892161225aeda64e9392    # 4.0.0
+        uses: actions/upload-artifact@694cdabd8bdb0f10b2cea11669e1bf5453eed0a6    # 4.2.0
         with:
           name: SARIF file
           path: results.sarif