deps(actions): bump the actions group with 8 updates

.github/workflows/bot-ai-review.yml

@@ -20,12 +20,12 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
 
       - name: Download plot metadata
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v6
         with:
           name: plot-metadata
           run-id: ${{ github.event.workflow_run.id }}
@@ -96,13 +96,13 @@ jobs:
         if: steps.pr.outputs.skip != 'true'
         id: gcs_auth
         continue-on-error: true
-        uses: google-github-actions/auth@v2
+        uses: google-github-actions/auth@v3
         with:
           credentials_json: ${{ secrets.GCS_CREDENTIALS }}
 
       - name: Setup gcloud CLI
         if: steps.pr.outputs.skip != 'true' && steps.gcs_auth.outcome == 'success'
-        uses: google-github-actions/setup-gcloud@v2
+        uses: google-github-actions/setup-gcloud@v3
 
       - name: Download plot images
         if: steps.pr.outputs.skip != 'true' && steps.gcs_auth.outcome == 'success'
@@ -156,7 +156,7 @@ jobs:
 
       - name: Trigger Claude Quality Check
         if: steps.pr.outputs.skip != 'true' && steps.attempts.outputs.count != '3'
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         with:
           script: |
             const specId = '${{ steps.pr.outputs.spec_id }}';

.github/workflows/bot-auto-merge.yml

@@ -84,7 +84,7 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Extract spec ID, library, and issues
         id: extract

.github/workflows/bot-auto-tag.yml

@@ -19,17 +19,17 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
 
       - name: Set up Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version: '3.13'
 
       - name: Install uv
-        uses: astral-sh/setup-uv@v4
+        uses: astral-sh/setup-uv@v7
 
       - name: Install dependencies
         run: |

.github/workflows/bot-validate-request.yml

@@ -66,7 +66,7 @@ jobs:
 
       - name: Checkout repository
         if: steps.check.outputs.should_run == 'true'
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
 

.github/workflows/ci-lint.yml

@@ -17,15 +17,15 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v6
 
     - name: Set up Python
-      uses: actions/setup-python@v5
+      uses: actions/setup-python@v6
       with:
         python-version: '3.13'
 
     - name: Install uv
-      uses: astral-sh/setup-uv@v4
+      uses: astral-sh/setup-uv@v7
 
     - name: Install dependencies
       run: |

.github/workflows/ci-plottest.yml

@@ -18,12 +18,12 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
 
       - name: Set up Python ${{ matrix.python-version }}
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version: ${{ matrix.python-version }}
 
@@ -111,7 +111,7 @@ jobs:
 
       - name: Upload test results
         if: always()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         with:
           name: test-results-${{ matrix.python-version }}
           path: test-results/

.github/workflows/ci-unittest.yml

@@ -17,15 +17,15 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v6
 
     - name: Set up Python
-      uses: actions/setup-python@v5
+      uses: actions/setup-python@v6
       with:
         python-version: '3.13'
 
     - name: Install uv
-      uses: astral-sh/setup-uv@v4
+      uses: astral-sh/setup-uv@v7
 
     - name: Install dependencies
       run: |
@@ -36,7 +36,7 @@ jobs:
         uv run pytest tests/unit -v --tb=short --cov=core --cov=api --cov-report=term-missing --cov-report=xml
 
     - name: Upload coverage to GitHub Artifacts
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@v5
       with:
         name: coverage-report
         path: coverage.xml

.github/workflows/gen-library-impl.yml

@@ -48,7 +48,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
 
@@ -61,12 +61,12 @@ jobs:
             --add-label "generating" 2>/dev/null || true
 
       - name: Set up Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version: '3.14'
 
       - name: Install uv
-        uses: astral-sh/setup-uv@v4
+        uses: astral-sh/setup-uv@v7
 
       - name: Install library-specific dependencies
         run: |

.github/workflows/gen-new-plot.yml

@@ -51,7 +51,7 @@ jobs:
 
       - name: Checkout repository
         if: steps.check.outputs.should_run == 'true'
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
 

.github/workflows/gen-preview.yml

@@ -19,7 +19,7 @@ jobs:
 
     steps:
       - name: Download test results
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v6
         with:
           pattern: test-results-*
           path: all-test-results
@@ -67,13 +67,13 @@ jobs:
           echo "Found PR: #$PR_NUMBER"
 
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           ref: ${{ github.event.workflow_run.head_sha }}
           fetch-depth: 0
 
       - name: Set up Python 3.14
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version: '3.14'
 
@@ -127,13 +127,13 @@ jobs:
         if: steps.changed_plots.outputs.has_plots == 'true'
         id: gcs_auth
         continue-on-error: true
-        uses: google-github-actions/auth@v2
+        uses: google-github-actions/auth@v3
         with:
           credentials_json: ${{ secrets.GCS_CREDENTIALS }}
 
       - name: Setup gcloud CLI
         if: steps.changed_plots.outputs.has_plots == 'true' && steps.gcs_auth.outcome == 'success'
-        uses: google-github-actions/setup-gcloud@v2
+        uses: google-github-actions/setup-gcloud@v3
 
       - name: Generate timestamp
         id: timestamp
@@ -315,7 +315,7 @@ jobs:
 
       - name: Upload metadata artifact
         if: steps.changed_plots.outputs.has_plots == 'true'
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         with:
           name: plot-metadata
           path: |

.github/workflows/gen-update-plot.yml

@@ -107,21 +107,21 @@ jobs:
 
       - name: Checkout code
         if: steps.check_attempts.outputs.max_reached != 'true'
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           ref: ${{ github.event.pull_request.head.ref }}
           fetch-depth: 0
           token: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Set up Python
         if: steps.check_attempts.outputs.max_reached != 'true'
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version: '3.14'
 
       - name: Install uv
         if: steps.check_attempts.outputs.max_reached != 'true'
-        uses: astral-sh/setup-uv@v4
+        uses: astral-sh/setup-uv@v7
 
       - name: Install dependencies
         if: steps.check_attempts.outputs.max_reached != 'true'

.github/workflows/util-claude.yml

@@ -23,7 +23,7 @@ jobs:
       actions: read         # Required for Claude to read CI results on PRs
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0    # Full history for better context