Fix coverage job 403 error and update deprecated Node.js 20 actions

[Copilot]

The coverage CI job was failing with a 403 permission error when pushing the updated badge, and all jobs were producing deprecation warnings for Node.js 20 actions.

Type

• New encoding (required)

Checklist

• No unrelated changes
• Codec is new (not already implemented)
• Tests included (if cannot be automated with tests/test_generated)
• Documentation (included in the right page in docs/pages/enc)

Description

Error fix — coverage job 403

The global workflow permissions set contents: read, but ad-m/github-push-action needs write access to commit the updated docs/coverage.svg. Added permissions: contents: write at the job level for coverage only (least-privilege).

Warning fixes — deprecated Node.js 20 actions

Updated pinned action versions to Node.js 24-compatible releases (mandatory by June 2026):

Before	After
actions/checkout@v3	actions/checkout@v4
actions/setup-python@v4	actions/setup-python@v5
tj-actions/verify-changed-files@v17	tj-actions/verify-changed-files@v20
dorny/paths-filter@v2	dorny/paths-filter@v3

Cosmetic fix

Removed stale ${{ matrix.python-version }} reference in the coverage job step name (no matrix defined there); replaced with the literal "3.13" already used in the python-version field.

Original prompt

---

This section details on the original issue you should resolve

<issue_title>Fix error and warnings in workflows</issue_title>
<issue_description>Fix:

• Error at coverage step in the last Action.
• Warnings in latest workflows.</issue_description>

<agent_instructions>See the latest failing Action ; there is an error with the coverage step. Please fix this.
Then please also propose a fix for the warnings in the latest workflows.</agent_instructions>

Comments on the Issue (you are @copilot in this section)

• Fixes Fix error and warnings in workflows #17

---

💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.