Merge pull request #28 from scientific-python/dependabot/github_actions/dot-github/workflows/actions-3ae72ecd37

Bump the actions group in /.github/workflows with 2 updates

Author: larsoner

.github/workflows/ci_workflows.yml

@@ -17,7 +17,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Checkout code
-      uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683  # v4.2.2
+      uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8  # v5.0.0
     - name: Set up Python
       uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065  # v5.6.0
       with:
@@ -29,7 +29,7 @@ jobs:
         flake8 *.py --count
         pytest --cov=./ --cov-report=xml
     - name: Upload coverage to codecov
-      uses: codecov/codecov-action@18283e04ce6e62d37312384ff67231eb8fd56d24  # v5.4.3
+      uses: codecov/codecov-action@fdcc8476540edceab3de004e990f80d881c6cc00  # v5.5.0
       with:
         files: ./coverage.xml
         verbose: true

.github/workflows/codeql-analysis.yml

@@ -43,7 +43,7 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683  # v4.2.2
+      uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8  # v5.0.0
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL