Bump the dependencies group with 2 updates (#571)

Bumps the dependencies group with 2 updates: [scitools/workflows](https://github.com/scitools/workflows) and [codecov/codecov-action](https://github.com/codecov/codecov-action).


Updates `scitools/workflows` from 2024.11.3 to 2024.11.5
- [Release notes](https://github.com/scitools/workflows/releases)
- [Commits](SciTools/workflows@2024.11.3...2024.11.5)

Updates `codecov/codecov-action` from 4 to 5
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](codecov/codecov-action@v4...v5)

---
updated-dependencies:
- dependency-name: scitools/workflows
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: codecov/codecov-action
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

.github/workflows/ci-manifest.yml

@@ -20,4 +20,4 @@ concurrency:
 jobs:
   manifest:
     name: "check-manifest"
-    uses: scitools/workflows/.github/workflows/[email protected].3
+    uses: scitools/workflows/.github/workflows/[email protected].5

.github/workflows/ci-tests.yml

@@ -133,6 +133,6 @@ jobs:
 
       - name: "upload coverage report"
         if: ${{ matrix.coverage }}
-        uses: codecov/codecov-action@v4
+        uses: codecov/codecov-action@v5
         with:
           token: ${{ secrets.CODECOV_TOKEN }}

.github/workflows/refresh-lockfiles.yml

@@ -10,5 +10,5 @@ on:
 
 jobs:
   refresh_lockfiles:
-    uses: scitools/workflows/.github/workflows/[email protected].3
+    uses: scitools/workflows/.github/workflows/[email protected].5
     secrets: inherit