ci: bump GitHub Actions to Node 24 runtimes (clear Node 20 deprecatio…

[pmarreck]

…n warnings)

[claude]

Claude Code Review

This pull request is from a fork — automated review is disabled. A repository maintainer can comment @claude review to run a one-time review.

[pmarreck]

Scope note: this clears the directly-fixable Node 20 deprecation warnings — the actions/checkout (→v5), actions/setup-python (→v6), astral-sh/setup-uv (→v7), and marocchino/sticky-pull-request-comment (→v3) bumps, all confirmed node24 with no input changes that affect this repo.

Two warnings will persist and aren't fixable from this repo — both are transitive inside third-party actions: the changelog job's actions/checkout@v3 lives inside tarides/changelog-check-action, and the lint job's deprecation is inside pre-commit/action (→ actions/cache). Those need a fix upstream in those actions — happy to file issues there if it'd help.

[mlissner]

@claude review once

[claude]

LGTM — mechanical CI action bumps to Node 24 runtimes.

Extended reasoning...

Overview

This PR bumps four GitHub Actions to their latest major versions across five workflow files (benchmark.yml, lint.yml, pdoc.yml, pypi.yml, tests.yml) to clear Node 20 deprecation warnings: actions/checkout v4→v5, actions/setup-python v5→v6, astral-sh/setup-uv v6→v7, and marocchino/sticky-pull-request-comment v2→v3. A matching CHANGES.md entry is added.

Security risks

None apparent. These are version bumps to widely-used, well-maintained official/popular actions; no secrets handling, permissions, or workflow triggers are changed. The pinning style (major-version tag) is unchanged from the existing convention.

Level of scrutiny

Low. This is a config-only change touching CI workflow files; no library code, no logic changes. The author confirmed in the PR description that each bumped action is Node 24 and that no input schema changes affect this repo. The remaining Node 20 warnings are transitive within third-party actions and acknowledged as out-of-scope.

Other factors

The bug hunting system found no issues. The maintainer explicitly asked for a review pass. No outstanding reviewer comments. The CHANGES.md entry accurately summarizes the change.