chore(deps)(deps): bump the all-dependencies group with 8 updates

.github/workflows/bench-cleanup.yml

@@ -15,7 +15,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Download server_id artifact from triggering run
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v8
         with:
           name: hetzner-server-id
           github-token: ${{ secrets.GH_PAT }}

.github/workflows/bench-image.yml

@@ -33,22 +33,22 @@ jobs:
           sudo docker image prune -af || true
           df -h /
 
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
-      - uses: docker/setup-buildx-action@v3
+      - uses: docker/setup-buildx-action@v4
         with:
           driver-opts: |
             image=moby/buildkit:latest
             network=host
 
-      - uses: docker/login-action@v3
+      - uses: docker/login-action@v4
         with:
           registry: ${{ env.REGISTRY }}
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - id: meta
-        uses: docker/metadata-action@v5
+        uses: docker/metadata-action@v6
         with:
           images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
           tags: |
@@ -58,7 +58,7 @@ jobs:
             type=raw,value=latest,enable={{is_default_branch}}
 
       - name: Build and push (amd64)
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v7
         with:
           context: .
           file: Dockerfile.bench

.github/workflows/bench-sweep.yml

@@ -41,7 +41,7 @@ jobs:
       sweep_id: ${{ steps.id.outputs.sweep_id }}
       ts: ${{ steps.id.outputs.ts }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - id: id
         run: |
           ts=$(date -u +%Y%m%dT%H%M%SZ)
@@ -159,7 +159,7 @@ jobs:
           echo "SSH: ${SSHCMD}"
 
       - name: Upload server_id for cleanup workflow
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: hetzner-server-id
           path: server_id.txt
@@ -236,7 +236,7 @@ jobs:
       INPUT_TIMEOUT: '600'
       INPUT_MANIFESTS_SUBDIR: v1
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Cell start metadata (write FIRST, before any failure point)
         run: |
@@ -508,7 +508,7 @@ jobs:
 
       - name: Upload cell artifact (90-day retention)
         if: always()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: cell-${{ matrix.method }}-b${{ matrix.budget }}-${{ matrix.test_set }}
           path: ${{ env.CELL_DIR }}/
@@ -527,17 +527,17 @@ jobs:
     permissions:
       contents: write
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
-      - uses: actions/setup-python@v5
+      - uses: actions/setup-python@v6
         with:
           python-version: '3.12'
 
       - name: Install deps
         run: pip install numpy scipy
 
       - name: Download all cell artifacts
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v8
         with:
           path: all_cells
           pattern: cell-*
@@ -562,7 +562,7 @@ jobs:
           head -80 aggregated/grand_summary.json || true
 
       - name: Upload aggregated tables (1-year retention)
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: sweep-aggregated-${{ needs.prep.outputs.sweep_id }}
           path: aggregated/

.github/workflows/cd.yml

@@ -143,7 +143,7 @@ jobs:
           git bundle create repo.bundle --all
 
       - name: Upload bundle as artifact
-        uses: actions/upload-artifact@v7.0.1
+        uses: actions/upload-artifact@v7
         with:
           name: git-repo-bundle
           path: repo.bundle
@@ -176,7 +176,7 @@ jobs:
     runs-on: ${{ matrix.os }}
     steps:
       - name: Download git bundle
-        uses: actions/download-artifact@v8.0.1
+        uses: actions/download-artifact@v8
         with:
           name: git-repo-bundle
 
@@ -274,7 +274,7 @@ jobs:
           fi
 
       - name: Upload artifact
-        uses: actions/upload-artifact@v7.0.1
+        uses: actions/upload-artifact@v7
         with:
           name: ${{ matrix.asset_name }}-binary
           path: ./repo/dist/treemapper-*
@@ -292,7 +292,7 @@ jobs:
       id-token: write
     steps:
       - name: Download git bundle
-        uses: actions/download-artifact@v8.0.1
+        uses: actions/download-artifact@v8
         with:
           name: git-repo-bundle
 
@@ -369,7 +369,7 @@ jobs:
       contents: write
     steps:
       - name: Download git bundle
-        uses: actions/download-artifact@v8.0.1
+        uses: actions/download-artifact@v8
         with:
           name: git-repo-bundle
 
@@ -422,7 +422,7 @@ jobs:
           echo "Successfully pushed version commit and tag"
 
       - name: Download all build artifacts
-        uses: actions/download-artifact@v8.0.1
+        uses: actions/download-artifact@v8
         with:
           path: ./artifacts
 

.github/workflows/ci.yml

@@ -195,7 +195,7 @@ jobs:
           verbose: true
 
       - name: Upload coverage for SonarCloud
-        uses: actions/upload-artifact@v7.0.1
+        uses: actions/upload-artifact@v7
         if: matrix.os == 'ubuntu-latest' && matrix.python-version == '3.12'
         with:
           name: coverage-report

.github/workflows/sensitivity-check.yml

@@ -26,9 +26,9 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 30
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
-      - uses: actions/setup-python@v5
+      - uses: actions/setup-python@v6
         with:
           python-version: '3.12'
 
@@ -47,7 +47,7 @@ jobs:
 
       - name: Upload sensitivity report
         if: always()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: sensitivity-report-${{ github.run_id }}
           path: sensitivity_output.txt