Bump actions/upload-artifact from 2 to 3 (ko-build#681)

Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 2 to 3.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@v2...v3)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

.github/workflows/sbom.yaml

@@ -56,7 +56,7 @@ jobs:
           go run ./ deps $img --sbom=cyclonedx > sbom.json
           ./cyclonedx-linux-x64 validate --input-file=sbom.json --fail-on-errors
 
-      - uses: actions/upload-artifact@v2
+      - uses: actions/upload-artifact@v3
         if: ${{ always() }}
         with:
           name: sbom.json
@@ -91,7 +91,7 @@ jobs:
 
           java -jar ./spdx-tools-2.2.7-jar-with-dependencies.jar Verify sbom.txt
 
-      - uses: actions/upload-artifact@v2
+      - uses: actions/upload-artifact@v3
         if: ${{ always() }}
         with:
           name: sbom.txt