Consolidate bot PRs #379-#383 and fix pytest incompatibility blocking their CI

[tpvasconcelos]

Re-applies the changes from 5 open bot PRs into a single branch (following the precedent set by #378), together with the test-suite fix that was causing their CI failures.

Why were these PRs failing CI?

All five bot PRs were failing the Software tests jobs for a reason unrelated to their changes: the latest pytest release deprecated passing a lazy iterator to pytest.mark.parametrize, and tests/unit/test_utils.py::TestGetXYExtrema passed an itertools.product object directly. Since the test config turns warnings into errors, collection failed everywhere (and the same deprecation also trips pyright in Static checks, seen on #383). The first commit here wraps it in list(...).

Consolidated changes

• pre-commit autoupdate ({gh-pr}379): check-jsonschema 0.37.2 → 0.37.4, codespell v2.4.2 → v2.4.3, ruff v0.15.13 → v0.15.22
• softprops/action-gh-release 2 → 3 (Bump softprops/action-gh-release from 2 to 3 #380): Node 20 → 24 runtime only, no functional changes
• codecov/codecov-action 6 → 7 (Bump codecov/codecov-action from 6 to 7 #381): PGP key source change; all inputs used in ci.yml still supported
• sigstore/gh-action-sigstore-python 3.3.0 → 3.4.0 (Bump sigstore/gh-action-sigstore-python from 3.3.0 to 3.4.0 #382): dependency updates only
• actions/checkout 6 → 7 (Bump actions/checkout from 6 to 7 #383): new fork-PR guardrail only affects pull_request_target/workflow_run workflows that check out code — none here do

Changelog updated under Unreleased changes > CI/CD.

Closes #379
Closes #380
Closes #381
Closes #382
Closes #383

---

📚 Documentation preview 📚: https://ridgeplot--384.org.readthedocs.build/en/384/

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 100.00%. Comparing base (658306c) to head (7921942).
⚠️ Report is 9 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff            @@
##              main      #384   +/-   ##
=========================================
  Coverage   100.00%   100.00%           
=========================================
  Files           18        18           
  Lines          657       657           
  Branches        85        85           
=========================================
  Hits           657       657           

Flag	Coverage Δ
combined-src	100.00% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 351ccbfc23

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[chatgpt-codex-connector]

Add the missing changelog entry

This PR changes CI/dependency configuration and a test, but docs/reference/changelog.md was not updated; its Unreleased CI/CD section still stops at earlier PRs, so the check-release-notes workflow will keep MISSING_CHANGELOG_ENTRY=1 and fail for any normal PR unless someone applies skip news. Please add the {gh-pr} changelog entry for this change so CI can pass.

Useful? React with 👍 / 👎.