build(deps): bump the dependencies group with 3 updates (#459)

Bumps the dependencies group with 3 updates: [scitools/workflows](https://github.com/scitools/workflows), [actions/upload-artifact](https://github.com/actions/upload-artifact) and [actions/download-artifact](https://github.com/actions/download-artifact).


Updates `scitools/workflows` from 2025.10.4 to 2025.10.7
- [Release notes](https://github.com/scitools/workflows/releases)
- [Commits](SciTools/workflows@2025.10.4...2025.10.7)

Updates `actions/upload-artifact` from 4 to 5
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@v4...v5)

Updates `actions/download-artifact` from 5 to 6
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@v5...v6)

---
updated-dependencies:
- dependency-name: scitools/workflows
  dependency-version: 2025.10.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: actions/upload-artifact
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: actions/download-artifact
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

.github/workflows/ci-locks.yml

@@ -15,5 +15,5 @@ concurrency:
 
 jobs:
   refresh_lockfiles:
-    uses: scitools/workflows/.github/workflows/[email protected].4
+    uses: scitools/workflows/.github/workflows/[email protected].7
     secrets: inherit

.github/workflows/ci-manifest.yml

@@ -25,4 +25,4 @@ concurrency:
 jobs:
   manifest:
     name: "check-manifest"
-    uses: scitools/workflows/.github/workflows/[email protected].4
+    uses: scitools/workflows/.github/workflows/[email protected].7

.github/workflows/ci-template-check.yml

@@ -10,7 +10,7 @@ on:
 
 jobs:
   prompt-share:
-    uses: scitools/workflows/.github/workflows/[email protected].4
+    uses: scitools/workflows/.github/workflows/[email protected].7
     secrets: inherit
     with:
       pr_number: ${{ github.event.pull_request.number }}

.github/workflows/ci-wheels.yml

@@ -52,7 +52,7 @@ jobs:
         run: |
           ls -l ${{ github.workspace }}/dist
 
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@v5
         with:
           name: pypi-artifacts
           path: ${{ github.workspace }}/dist
@@ -83,7 +83,7 @@ jobs:
         with:
           python-version: ${{ matrix.python-version }}
 
-      - uses: actions/download-artifact@v5
+      - uses: actions/download-artifact@v6
         with:
           name: pypi-artifacts
           path: ${{ github.workspace }}/dist
@@ -102,7 +102,7 @@ jobs:
     name: "show artifacts"
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/download-artifact@v5
+      - uses: actions/download-artifact@v6
         with:
           name: pypi-artifacts
           path: ${{ github.workspace }}/dist
@@ -119,7 +119,7 @@ jobs:
     # upload to Test PyPI for every commit on main branch
     if: github.event_name == 'push' && github.event.ref == 'refs/heads/main'
     steps:
-      - uses: actions/download-artifact@v5
+      - uses: actions/download-artifact@v6
         with:
           name: pypi-artifacts
           path: ${{ github.workspace }}/dist
@@ -140,7 +140,7 @@ jobs:
     # upload to PyPI for every tag starting with 'v'
     if: github.event_name == 'push' && startsWith(github.event.ref, 'refs/tags/v')
     steps:
-      - uses: actions/download-artifact@v5
+      - uses: actions/download-artifact@v6
         with:
           name: pypi-artifacts
           path: ${{ github.workspace }}/dist