Merge pull request #99 from matplotlib/dependabot/github_actions/actions-57c09e9133

Bump the actions group with 4 updates

Author: dstansby

.github/workflows/lint.yml

@@ -18,15 +18,15 @@ jobs:
           persist-credentials: false
 
       - name: Set up Python 3
-        uses: actions/setup-python@42375524e23c412d93fb67b49958b491fce71c38  # v5.4.0
+        uses: actions/setup-python@8d9ed9ac5c53483de85588cdf95a591a75ab9f55  # v5.5.0
         with:
           python-version: '3.x'
 
       - name: Install flake8
         run: pip3 install 'flake8>=3.8'
 
       - name: Set up reviewdog
-        uses: reviewdog/action-setup@3f401fe1d58fe77e10d665ab713057375e39b887  # v1.3.9
+        uses: reviewdog/action-setup@e04ffabe3898a0af8d0fb1af00c188831c4b5893  # v1.3.9
 
       - name: Run flake8
         env:

.github/workflows/release.yml

@@ -21,7 +21,7 @@ jobs:
 
       - name: Set up Python
         id: setup
-        uses: actions/setup-python@42375524e23c412d93fb67b49958b491fce71c38  # v5.4.0
+        uses: actions/setup-python@8d9ed9ac5c53483de85588cdf95a591a75ab9f55  # v5.5.0
         with:
           python-version: '3.x'
 
@@ -34,7 +34,7 @@ jobs:
         run: python -m build
 
       - name: Save built packages as artifact
-        uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1  # v4.6.1
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02  # v4.6.2
         with:
           name: packages-${{ runner.os }}-${{ steps.setup.outputs.python-version }}
           path: dist/
@@ -52,7 +52,7 @@ jobs:
       id-token: write
     steps:
       - name: Download packages
-        uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806  # v4.1.9
+        uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e  # v4.2.1
         with:
           pattern: packages-*
           path: dist