deps(ci): bump versions of third-party CI actions

.github/workflows/_checks.yaml

@@ -15,22 +15,22 @@ jobs:
   pre_commit:
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - uses: ./.github/actions/pre-commit
 
   generate-nox-py-versions:
     runs-on: ubuntu-24.04
     outputs:
       py_version: ${{ steps.set-matrix.outputs.py_version }}
     steps:
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@v6
     - name: Cache nox Python versions list
       id: cache-nox-py-versions
       uses: actions/cache@v4
       with:
         path: .nox-py-versions.json
         key: nox-py-versions-${{ runner.os }}-${{ hashFiles('noxfile.py', 'pyproject.toml') }}
-    - uses: wntrblm/nox@2025.10.16
+    - uses: wntrblm/nox@2025.11.12
       if: steps.cache-nox-py-versions.outputs.cache-hit != 'true'
     - id: set-matrix
       shell: bash
@@ -63,12 +63,12 @@ jobs:
         py_version: ${{ fromJson(needs.generate-nox-py-versions.outputs.py_version) }}
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - uses: astral-sh/setup-uv@v7
         with:
-          version: "0.8.22"
+          version: "0.9.11"
           enable-cache: true
-      - uses: wntrblm/nox@2025.10.16
+      - uses: wntrblm/nox@2025.11.12
         with:
           python-versions: "${{ matrix.py_version }}"
       - run: nox --session "tests-${{ matrix.py_version }}"

.github/workflows/release-please.yaml

@@ -41,14 +41,14 @@ jobs:
       # Update the version in uv.lock only if release-please created or updated a Pull Request.
       # Otherwise the 'checkout' step fails because the 'release-...' branch does not exist.
       # Avoids attempting a uv.lock update immediately after a release-please PR is merged.
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
         if: ${{ steps.release.outputs.prs_created == 'true' }}
         with:
           ref: release-please--branches--main
       - uses: astral-sh/setup-uv@v7
         if: ${{ steps.release.outputs.prs_created == 'true' }}
         with:
-          version: "0.8.22"
+          version: "0.9.11"
           enable-cache: true
       - run: uv lock
         if: ${{ steps.release.outputs.prs_created == 'true' }}

docs/README-dev.md

@@ -124,7 +124,7 @@ See the `tool.pytest` table in `pyproject.toml` for a list of all marks.
 Nox is used to automate testing across different Python versions. Test sessions are
 configured via `noxfile.py`.
 
-## Tests in GitHub Actions
+### Tests in GitHub Actions
 
 A matrix strategy is used for the `test` GitHub Action. This runs each Nox session
 (i.e. Python version test run) as a separate pipeline job.

template/README.md.jinja

@@ -163,7 +163,7 @@ configured via `noxfile.py`. `coverage` reporting will only run for test runs fo
 oldest and latest Python versions.
 
 {%if is_github_project%}
-## Tests in GitHub Actions
+### Tests in GitHub Actions
 
 A matrix strategy is used for the `test` GitHub Action. This runs each Nox session
 (i.e. Python version test run) as a separate pipeline job.

template/{%if is_github_project%}.github{%endif%}/workflows/_checks.yaml

@@ -15,22 +15,22 @@ jobs:
   pre_commit:
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - uses: ./.github/actions/pre-commit
 
   generate-nox-sessions:
     runs-on: ubuntu-24.04
     outputs:
       session: ${{ steps.set-matrix.outputs.session }}
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - name: Cache nox session list
         id: cache-nox-sessions
         uses: actions/cache@v4
         with:
           path: .nox-sessions.json
           key: nox-sessions-${{ runner.os }}-${{ hashFiles('noxfile.py', 'pyproject.toml') }}
-      - uses: wntrblm/nox@2025.10.16
+      - uses: wntrblm/nox@2025.11.12
         if: steps.cache-nox-sessions.outputs.cache-hit != 'true'
       - id: set-matrix
         shell: bash
@@ -62,10 +62,10 @@ jobs:
         session: ${{ fromJson(needs.generate-nox-sessions.outputs.session) }}
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - uses: astral-sh/setup-uv@v7
         with:
-          version: "0.8.22"
+          version: "0.9.11"
           enable-cache: true
-      - uses: wntrblm/nox@2025.10.16
+      - uses: wntrblm/nox@2025.11.12
       - run: nox --session "${{ matrix.session }}"

template/{%if is_github_project%}.github{%endif%}/workflows/release-please.yaml

@@ -40,14 +40,14 @@ jobs:
       # Update the version in uv.lock only if release-please created or updated a Pull Request.
       # Otherwise the 'checkout' step fails because the 'release-...' branch does not exist.
       # Avoids attempting a uv.lock update immediately after a release-please PR is merged.
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
         if: ${{ steps.release.outputs.prs_created == 'true' }}
         with:
           ref: release-please--branches--main
       - uses: astral-sh/setup-uv@v7
         if: ${{ steps.release.outputs.prs_created == 'true' }}
         with:
-          version: "0.8.22"
+          version: "0.9.11"
           enable-cache: true
       - run: uv lock
         if: ${{ steps.release.outputs.prs_created == 'true' }}