Merge pull request #29 from scientific-python/dependabot/github_actions/dot-github/workflows/actions-0563b434fb

Bump the actions group in /.github/workflows with 2 updates

Author: larsoner

.github/workflows/ci_workflows.yml

@@ -19,7 +19,7 @@ jobs:
     - name: Checkout code
       uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8  # v5.0.0
     - name: Set up Python
-      uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065  # v5.6.0
+      uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c  # v6.0.0
       with:
         python-version: '3.11'
     - name: Install dependencies
@@ -29,7 +29,7 @@ jobs:
         flake8 *.py --count
         pytest --cov=./ --cov-report=xml
     - name: Upload coverage to codecov
-      uses: codecov/codecov-action@fdcc8476540edceab3de004e990f80d881c6cc00  # v5.5.0
+      uses: codecov/codecov-action@5a1091511ad55cbe89839c7260b706298ca349f7  # v5.5.1
       with:
         files: ./coverage.xml
         verbose: true