Bump the dependencies group across 1 directory with 7 updates

.github/workflows/ci-locks.yml

@@ -30,7 +30,7 @@ jobs:
         lock: [py310-lock, py311-lock, py312-lock, py313-lock]
     steps:
     - name: "Checkout"
-      uses: actions/checkout@v4
+      uses: actions/checkout@v5
 
     - name: "Environment configure"
       env:
@@ -40,7 +40,7 @@ jobs:
         echo "CACHE_PERIOD=$(date +%Y).$(expr $(date +%U) / ${CACHE_WEEKS})" >> ${GITHUB_ENV}
 
     - name: "Conda package cache"
-      uses: actions/[email protected].3
+      uses: actions/[email protected].4
       env:
         # Increment the build number to force a cache refresh.
         CACHE_BUILD: 5
@@ -58,7 +58,7 @@ jobs:
 
     - name: "Conda environment cache"
       id: conda-env-cache
-      uses: actions/[email protected].3
+      uses: actions/[email protected].4
       env:
         # Increment the build number to force a cache refresh.
         CACHE_BUILD: 5
@@ -77,7 +77,7 @@ jobs:
         conda list
 
     - name: "Tox cache"
-      uses: actions/[email protected].3
+      uses: actions/[email protected].4
       env:
         # Increment the build number to forece a cache refresh.
         CACHE_BUILD: 5
@@ -103,10 +103,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: "Checkout"
-      uses: actions/checkout@v4
+      uses: actions/checkout@v5
 
     - name: "Download lock artifacts"
-      uses: actions/download-artifact@v4
+      uses: actions/download-artifact@v5
       with:
         path: ${{ github.workspace }}/requirements/locks
         merge-multiple: true

.github/workflows/ci-manifest.yml

@@ -23,4 +23,4 @@ concurrency:
 jobs:
   manifest:
     name: "check-manifest"
-    uses: scitools/workflows/.github/workflows/ci-manifest.yml@2025.07.1
+    uses: scitools/workflows/.github/workflows/ci-manifest.yml@2025.09.3

.github/workflows/ci-template-check.yml

@@ -10,7 +10,7 @@ on:
 
 jobs:
   prompt-share:
-    uses: scitools/workflows/.github/workflows/ci-template-check.yml@2025.07.0
+    uses: scitools/workflows/.github/workflows/ci-template-check.yml@2025.09.3
     secrets: inherit
     with:
       pr_number: ${{ github.event.pull_request.number }}

.github/workflows/ci-tests.yml

@@ -50,7 +50,7 @@ jobs:
             platform: win
     steps:
     - name: "Checkout"
-      uses: actions/checkout@v4
+      uses: actions/checkout@v5
       with:
         fetch-depth: 0
 
@@ -62,7 +62,7 @@ jobs:
         echo "CACHE_PERIOD=$(date +%Y).$(expr $(date +%U) / ${CACHE_WEEKS})" >> ${GITHUB_ENV}
 
     - name: "Conda package cache"
-      uses: actions/[email protected].3
+      uses: actions/[email protected].4
       env:
         # Increment the build number to force a cache refresh.
         CACHE_BUILD: 2
@@ -80,7 +80,7 @@ jobs:
 
     - name: "Conda environment cache"
       id: conda-env-cache
-      uses: actions/[email protected].3
+      uses: actions/[email protected].4
       env:
         # Increment the build number to force a cache refresh.
         CACHE_BUILD: 2
@@ -99,7 +99,7 @@ jobs:
         conda list
 
     - name: "Tox cache"
-      uses: actions/[email protected].3
+      uses: actions/[email protected].4
       env:
         # Increment the build number to forece a cache refresh.
         CACHE_BUILD: 2
@@ -112,7 +112,7 @@ jobs:
     # so we need to prepare environment variables for it
     - name: Export environment variables for UDUNITS2 lookup
       if: runner.os == 'Windows'
-      uses: actions/github-script@v7
+      uses: actions/github-script@v8
       with:
         script: |
           const path = require('path')
@@ -132,6 +132,6 @@ jobs:
 
     - name: "Upload coverage report to Codecov"
       if: contains(matrix.posargs, '--cov')
-      uses: codecov/codecov-action@18283e04ce6e62d37312384ff67231eb8fd56d24
+      uses: codecov/codecov-action@5a1091511ad55cbe89839c7260b706298ca349f7
       with:
         token: ${{ secrets.CODECOV_TOKEN }}

.github/workflows/ci-wheels.yml

@@ -66,7 +66,7 @@ jobs:
           arch: "arm64"
 
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v5
       with:
         fetch-depth: 0
 
@@ -90,7 +90,7 @@ jobs:
       run: conda install udunits2
 
     - name: "Building ${{ matrix.os }} (${{ matrix.arch }}) wheels"
-      uses: pypa/cibuildwheel@v3.0.1
+      uses: pypa/cibuildwheel@v3.1.4
       env:
         CIBW_SKIP: "cp39-* pp* *-musllinux*"
         CIBW_ARCHS: ${{ matrix.arch }}
@@ -124,7 +124,7 @@ jobs:
     name: "Build sdist"
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v5
       with:
         fetch-depth: 0
 
@@ -144,7 +144,7 @@ jobs:
     name: "Show artifacts"
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/download-artifact@v4
+    - uses: actions/download-artifact@v5
       with:
         path: ${{ github.workspace }}/dist
         merge-multiple: true
@@ -161,7 +161,7 @@ jobs:
     # upload to Test PyPI for every commit on main branch
     if: github.event_name == 'push' && github.event.ref == 'refs/heads/main'
     steps:
-    - uses: actions/download-artifact@v4
+    - uses: actions/download-artifact@v5
       with:
         path: ${{ github.workspace }}/dist
         merge-multiple: true
@@ -182,7 +182,7 @@ jobs:
     # upload to PyPI for every tag starting with 'v'
     if: github.event_name == 'push' && startsWith(github.event.ref, 'refs/tags/v')
     steps:
-    - uses: actions/download-artifact@v4
+    - uses: actions/download-artifact@v5
       with:
         path: ${{ github.workspace }}/dist
         merge-multiple: true