Upgrade various gha steps

Avoid messages like:

```
The following actions uses node12 which is deprecated and will be forced to run on node16: actions/setup-go@v2, coverallsapp/[email protected]. For more info: https://github.blog/changelog/2023-06-13-github-actions-all-actions-will-run-on-node16-instead-of-node12-by-default/
```

.github/workflows/ci.yml

@@ -13,9 +13,9 @@ jobs:
   test:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v4.1.1
 
-    - uses: actions/setup-go@v2
+    - uses: actions/setup-go@v5
       with:
         go-version: '>=1.21.0'
 
@@ -31,7 +31,7 @@ jobs:
       uses: jandelgado/[email protected]
 
     - name: Coveralls
-      uses: coverallsapp/github-action@1.1.3
+      uses: coverallsapp/github-action@v2.2.3
       with:
         github-token: ${{ secrets.github_token }}
         path-to-lcov: coverage.lcov
@@ -47,7 +47,7 @@ jobs:
         golangci-lint run --skip-files='.*_test.go'
 
     - name: Archive stuff
-      uses: actions/upload-artifact@v3
+      uses: actions/upload-artifact@v4.0.0
       with:
         name: build-artefacts
         path: |
@@ -65,7 +65,7 @@ jobs:
         fetch-depth: 0
 
     - name: Download artefacts
-      uses: actions/download-artifact@v3
+      uses: actions/download-artifact@v4.1.0
       with:
         name: build-artefacts
 
@@ -84,15 +84,15 @@ jobs:
     runs-on: ubuntu-latest
     if: contains(github.ref, 'refs/tags')
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v4.1.1
 
     - name: Download artefacts
-      uses: actions/download-artifact@v3
+      uses: actions/download-artifact@v4.1.0
       with:
         name: build-artefacts
 
     - name: Generate SBOM
-      uses: CycloneDX/gh-gomod-generate-sbom@v1
+      uses: CycloneDX/gh-gomod-generate-sbom@v2
       with:
         version: v1
         args: mod -licenses -json -output bom.json