chore(ci): 升级GitHub Actions到最新版本

- actions/checkout v4 → v7
- actions/setup-python v5 → v6
- docker/setup-buildx-action v3 → v4
- docker/setup-qemu-action v3 → v4
- docker/build-push-action v5 → v7

合并dependabot PR #1-#5的变更

🤖 Generated with CodeArts

Author: WenCao

.github/workflows/ci.yml

@@ -15,8 +15,8 @@ jobs:
     name: L1 规范检查
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-python@v5
+      - uses: actions/checkout@v7
+      - uses: actions/setup-python@v6
         with:
           python-version: "3.11"
       - name: Install project + dev deps
@@ -39,9 +39,9 @@ jobs:
         os: [ubuntu-latest, macos-latest, windows-latest]
         python-version: ["3.10", "3.11", "3.12"]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - name: Set up Python ${{ matrix.python-version }}
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version: ${{ matrix.python-version }}
       - name: Install dependencies
@@ -65,8 +65,8 @@ jobs:
     name: L3 安全扫描
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-python@v5
+      - uses: actions/checkout@v7
+      - uses: actions/setup-python@v6
         with:
           python-version: "3.11"
       - name: Install project + dev deps
@@ -90,7 +90,6 @@ jobs:
           high = data.get('metrics', {}).get('_totals', {}).get('SEVERITY.HIGH', 0)
           if high > 0:
               print(f'WARNING: {high} HIGH severity issues found - review bandit-report.json')
-              # Don't fail CI on bandit findings - use as advisory
           else:
               print('OK: 0 HIGH severity issues')
           "
@@ -105,13 +104,13 @@ jobs:
     needs: [lint, test]
     if: github.event_name == 'push' && github.ref == 'refs/heads/main'
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@v3
+        uses: docker/setup-qemu-action@v4
       - name: Build multi-arch images
-        uses: docker/build-push-action@v5
+        uses: docker/build-push-action@v7
         with:
           context: .
           platforms: linux/amd64,linux/arm64