Bump GitHub action versions

.github/workflows/pytest.yml

@@ -20,9 +20,9 @@ jobs:
         python-version: ["3.10", "3.11"]
 
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: Set up Python ${{ matrix.python-version }}
-        uses: actions/setup-python@v4
+        uses: actions/setup-python@v5
         with:
           python-version: ${{ matrix.python-version }}
 
@@ -32,14 +32,14 @@ jobs:
         id: pip-cache
         run: echo "dir=$(pip cache dir)" >> $GITHUB_OUTPUT
       - name: pip cache
-        uses: actions/cache@v3
+        uses: actions/cache@v4
         if: startsWith(runner.os, 'Linux') || startsWith(runner.os, 'macOS')
         with:
           path: ${{ steps.pip-cache.outputs.dir }}
           key: ${{ runner.os }}-pip-${{ hashFiles('**/pyproject.toml') }}
           restore-keys: |
             ${{ runner.os }}-pip-
-      - uses: actions/cache@v3
+      - uses: actions/cache@v4
         if: startsWith(runner.os, 'Windows')
         with:
           # 20221026 This only worked w/set-output in the pip cache dir step on Win
@@ -224,7 +224,7 @@ jobs:
             done ;
       # CodeQL analysis section END
       - name: Upload coverage to Codecov
-        uses: codecov/codecov-action@v3
+        uses: codecov/codecov-action@v3.1.5
         continue-on-error: true # codecov limits number of uploads allowed for each commit
         with:
           # token: ${{ secrets.CODECOV_TOKEN }}