Bump the dependencies group across 1 directory with 4 updates (#377)

Bumps the dependencies group with 4 updates in the / directory: [actions/checkout](https://github.com/actions/checkout), [scitools/workflows](https://github.com/scitools/workflows), [pypa/cibuildwheel](https://github.com/pypa/cibuildwheel) and [actions/download-artifact](https://github.com/actions/download-artifact).


Updates `actions/checkout` from 4 to 5
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v4...v5)

Updates `scitools/workflows` from 2025.07.3 to 2025.08.2
- [Release notes](https://github.com/scitools/workflows/releases)
- [Commits](SciTools/workflows@2025.07.3...2025.08.2)

Updates `pypa/cibuildwheel` from 3.1.2 to 3.1.3
- [Release notes](https://github.com/pypa/cibuildwheel/releases)
- [Changelog](https://github.com/pypa/cibuildwheel/blob/main/docs/changelog.md)
- [Commits](pypa/cibuildwheel@v3.1.2...v3.1.3)

Updates `actions/download-artifact` from 4 to 5
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@v4...v5)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: scitools/workflows
  dependency-version: 2025.08.2
  dependency-type: direct:production
  dependency-group: dependencies
- dependency-name: pypa/cibuildwheel
  dependency-version: 3.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: actions/download-artifact
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

.github/workflows/ci-citation.yml

@@ -20,7 +20,7 @@ jobs:
     name: "validate"
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           fetch-depth: 0
 

.github/workflows/ci-locks.yml

@@ -18,5 +18,5 @@ concurrency:
 
 jobs:
   refresh_lockfiles:
-    uses: scitools/workflows/.github/workflows/refresh-lockfiles.yml@2025.07.3
+    uses: scitools/workflows/.github/workflows/refresh-lockfiles.yml@2025.08.2
     secrets: inherit

.github/workflows/ci-manifest.yml

@@ -25,4 +25,4 @@ concurrency:
 jobs:
   manifest:
     name: "check-manifest"
-    uses: scitools/workflows/.github/workflows/ci-manifest.yml@2025.07.3
+    uses: scitools/workflows/.github/workflows/ci-manifest.yml@2025.08.2

.github/workflows/ci-template-check.yml

@@ -10,7 +10,7 @@ on:
 
 jobs:
   prompt-share:
-    uses: scitools/workflows/.github/workflows/ci-template-check.yml@2025.07.3
+    uses: scitools/workflows/.github/workflows/ci-template-check.yml@2025.08.2
     secrets: inherit
     with:
       pr_number: ${{ github.event.pull_request.number }}

.github/workflows/ci-tests.yml

@@ -52,7 +52,7 @@ jobs:
             codecov: "codecov"
 
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v5
       with:
         fetch-depth: 0
 

.github/workflows/ci-wheels.yml

@@ -43,12 +43,12 @@ jobs:
             arch: "AMD64"
 
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v5
       with:
         fetch-depth: 0
 
     - name: "build ${{ matrix.os }} (${{ matrix.arch }}) wheels"
-      uses: pypa/[email protected].2
+      uses: pypa/[email protected].3
       env:
         CIBW_SKIP: "cp39-* cp310-* cp314-* pp* *-musllinux*"
         CIBW_ARCHS: ${{ matrix.arch }}
@@ -69,7 +69,7 @@ jobs:
     name: "Build sdist"
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v5
       with:
         fetch-depth: 0
 
@@ -89,7 +89,7 @@ jobs:
     name: "Show artifacts"
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/download-artifact@v4
+    - uses: actions/download-artifact@v5
       with:
         merge-multiple: true
         path: ${{ github.workspace }}/dist
@@ -106,7 +106,7 @@ jobs:
     # upload to Test PyPI for every commit on main branch
     if: github.event_name == 'push' && github.event.ref == 'refs/heads/main'
     steps:
-    - uses: actions/download-artifact@v4
+    - uses: actions/download-artifact@v5
       with:
         merge-multiple: true
         path: ${{ github.workspace }}/dist
@@ -127,7 +127,7 @@ jobs:
     # upload to PyPI for every tag starting with 'v'
     if: github.event_name == 'push' && startsWith(github.event.ref, 'refs/tags/v')
     steps:
-    - uses: actions/download-artifact@v4
+    - uses: actions/download-artifact@v5
       with:
         merge-multiple: true
         path: ${{ github.workspace }}/dist