Bump the github-dependencies group across 1 directory with 5 updates

.github/workflows/benchmark.yml

@@ -107,7 +107,7 @@ jobs:
     name: Download Data (SF${{ github.event.inputs.scale_factor || '1' }})
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Cache benchmark data
         id: cache-data
@@ -118,7 +118,7 @@ jobs:
 
       - name: Setup Python
         if: steps.cache-data.outputs.cache-hit != 'true'
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version: '3.11'
 
@@ -191,7 +191,7 @@ jobs:
     runs-on: ubuntu-latest
     if: contains(github.event.inputs.engines || 'duckdb,geopandas,sedonadb,spatial_polars', 'duckdb')
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Restore benchmark data from cache
         uses: actions/cache/restore@v4
@@ -201,7 +201,7 @@ jobs:
           fail-on-cache-miss: true
 
       - name: Setup Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version: '3.11'
 
@@ -238,7 +238,7 @@ jobs:
             --output duckdb_results.json
 
       - name: Upload results
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         with:
           name: duckdb-results-sf${{ env.SCALE_FACTOR }}
           path: duckdb_results.json
@@ -250,7 +250,7 @@ jobs:
     runs-on: ubuntu-latest
     if: contains(github.event.inputs.engines || 'duckdb,geopandas,sedonadb,spatial_polars', 'geopandas')
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Restore benchmark data from cache
         uses: actions/cache/restore@v4
@@ -260,7 +260,7 @@ jobs:
           fail-on-cache-miss: true
 
       - name: Setup Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version: '3.11'
 
@@ -284,7 +284,7 @@ jobs:
             --output geopandas_results.json
 
       - name: Upload results
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         with:
           name: geopandas-results-sf${{ env.SCALE_FACTOR }}
           path: geopandas_results.json
@@ -296,7 +296,7 @@ jobs:
     runs-on: ubuntu-latest
     if: contains(github.event.inputs.engines || 'duckdb,geopandas,sedonadb,spatial_polars', 'sedonadb')
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Restore benchmark data from cache
         uses: actions/cache/restore@v4
@@ -306,7 +306,7 @@ jobs:
           fail-on-cache-miss: true
 
       - name: Setup Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version: '3.11'
 
@@ -340,7 +340,7 @@ jobs:
             --output sedonadb_results.json
 
       - name: Upload results
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         with:
           name: sedonadb-results-sf${{ env.SCALE_FACTOR }}
           path: sedonadb_results.json
@@ -352,7 +352,7 @@ jobs:
     runs-on: ubuntu-latest
     if: contains(github.event.inputs.engines || 'duckdb,geopandas,sedonadb,spatial_polars', 'spatial_polars')
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Restore benchmark data from cache
         uses: actions/cache/restore@v4
@@ -362,7 +362,7 @@ jobs:
           fail-on-cache-miss: true
 
       - name: Setup Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version: '3.11'
 
@@ -386,7 +386,7 @@ jobs:
             --output spatial_polars_results.json
 
       - name: Upload results
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         with:
           name: spatial_polars-results-sf${{ env.SCALE_FACTOR }}
           path: spatial_polars_results.json
@@ -398,42 +398,42 @@ jobs:
     if: always() && (needs.benchmark-duckdb.result == 'success' || needs.benchmark-geopandas.result == 'success' || needs.benchmark-sedonadb.result == 'success' || needs.benchmark-spatial-polars.result == 'success')
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Download DuckDB results
         if: needs.benchmark-duckdb.result == 'success'
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v7
         with:
           name: duckdb-results-sf${{ env.SCALE_FACTOR }}
           path: results
         continue-on-error: true
 
       - name: Download GeoPandas results
         if: needs.benchmark-geopandas.result == 'success'
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v7
         with:
           name: geopandas-results-sf${{ env.SCALE_FACTOR }}
           path: results
         continue-on-error: true
 
       - name: Download SedonaDB results
         if: needs.benchmark-sedonadb.result == 'success'
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v7
         with:
           name: sedonadb-results-sf${{ env.SCALE_FACTOR }}
           path: results
         continue-on-error: true
 
       - name: Download Spatial Polars results
         if: needs.benchmark-spatial-polars.result == 'success'
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v7
         with:
           name: spatial_polars-results-sf${{ env.SCALE_FACTOR }}
           path: results
         continue-on-error: true
 
       - name: Setup Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version: '3.11'
 
@@ -452,7 +452,7 @@ jobs:
         run: cat benchmark_summary.md >> $GITHUB_STEP_SUMMARY
 
       - name: Upload combined results
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         with:
           name: benchmark-summary-sf${{ env.SCALE_FACTOR }}
           path: |

.github/workflows/build-py-packages.yml

@@ -92,7 +92,7 @@ jobs:
             os: macos
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: Set ARM architecture flags for Linux cross-compilation
         if: (matrix.target == 'aarch64' || matrix.target == 'armv7') && (matrix.os == 'linux' || matrix.os == 'musllinux')
         run: |
@@ -112,15 +112,15 @@ jobs:
           manylinux: ${{ matrix.manylinux || '' }}
       - name: Upload wheels
         if: ${{ inputs.upload-artifacts || github.event_name == 'push' || github.event_name == 'pull_request' || github.event_name == 'workflow_dispatch' }}
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         with:
           name: wheels-${{ matrix.os }}-${{ matrix.target }}
           path: spatialbench-cli/dist
 
   sdist:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: Build sdist
         uses: PyO3/maturin-action@v1
         with:
@@ -129,7 +129,7 @@ jobs:
           working-directory: spatialbench-cli
       - name: Upload sdist
         if: ${{ inputs.upload-artifacts || github.event_name == 'push' || github.event_name == 'pull_request' || github.event_name == 'workflow_dispatch' }}
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         with:
           name: wheels-sdist
           path: spatialbench-cli/dist

.github/workflows/packaging.yml

@@ -37,9 +37,9 @@ jobs:
     name: Build Documentation
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
-      - uses: actions/setup-python@v5
+      - uses: actions/setup-python@v6
         with:
           python-version: "3.13"
 
@@ -57,7 +57,7 @@ jobs:
           tar -czf docs.tgz documentation-site
 
       - name: Upload docs artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         with:
           name: docs
           retention-days: 2
@@ -72,12 +72,12 @@ jobs:
     if: github.event_name == 'push' && github.ref == 'refs/heads/main'
 
     steps:
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v7
         with:
           name: docs
 
       - name: Clone asf-site branch
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           ref: asf-site
           path: pages-clone

.github/workflows/rust.yml

@@ -33,7 +33,7 @@ jobs:
   lint:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: Setup Rust toolchain
         uses: dtolnay/rust-toolchain@stable
         with:
@@ -53,7 +53,7 @@ jobs:
   test-tests-spatialbench:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - uses: dtolnay/rust-toolchain@stable
       - uses: Swatinem/rust-cache@v2
         with:
@@ -64,7 +64,7 @@ jobs:
   test-doc-spatialbench:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - uses: dtolnay/rust-toolchain@stable
       - uses: Swatinem/rust-cache@v2
         with:
@@ -75,7 +75,7 @@ jobs:
   test-all-spatialbench-arrow:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - uses: dtolnay/rust-toolchain@stable
       - uses: Swatinem/rust-cache@v2
         with:
@@ -86,7 +86,7 @@ jobs:
   test-all-spatialbench-cli:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - uses: dtolnay/rust-toolchain@stable
       - uses: Swatinem/rust-cache@v2
         with:
@@ -98,7 +98,7 @@ jobs:
   docs:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - uses: dtolnay/rust-toolchain@stable
       - uses: Swatinem/rust-cache@v2
         with:

.github/workflows/spatialbench-cli-publish-pypi.yml

@@ -24,7 +24,7 @@ jobs:
       attestations: write # Used to generate artifact attestation
     steps:
       - name: Download all build artifacts
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v7
         with:
           pattern: '*'
           merge-multiple: true
@@ -37,7 +37,7 @@ jobs:
         run: python -m twine check --strict dist/*
 
       - name: Generate artifact attestation
-        uses: actions/attest-build-provenance@v2
+        uses: actions/attest-build-provenance@v3
         with:
           subject-path: 'dist/*'
 

.github/workflows/spatialbench-publish-crates.yml

@@ -21,7 +21,7 @@ jobs:
           - "spatialbench-arrow"
           - "spatialbench-cli"
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
 
       - uses: rust-lang/crates-io-auth-action@v1
         id: auth