From ceec67450d69be22c2be63711dd79972ba5fd013 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Thu, 3 Sep 2026 02:09:57 +0000 Subject: [PATCH 1/2] chore(deps): update zizmorcore/zizmor-action action to v0.6.3 --- .github/workflows/ci-security.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ci-security.yaml b/.github/workflows/ci-security.yaml index fb95f69..54ebd0f 100644 --- a/.github/workflows/ci-security.yaml +++ b/.github/workflows/ci-security.yaml @@ -24,6 +24,6 @@ jobs: persist-credentials: false - name: Run zizmor - uses: zizmorcore/zizmor-action@3dc1ecc9bcb9e94e9b2c709687979e1298497054 # v0.6.2 + uses: zizmorcore/zizmor-action@70fb788f84895a7701f5643d103d587e460b5c99 # v0.6.3 with: advanced-security: false From 50f1bc07c82b465484cf8174c26d8f510bd3d08e Mon Sep 17 00:00:00 2001 From: Max Mehl Date: Thu, 3 Sep 2026 15:24:30 +0200 Subject: [PATCH 2/2] ci: apply new local github workflow best practice (zizmor) --- .github/workflows/real-test.yaml | 2 +- .github/workflows/test.yaml | 8 ++++---- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/.github/workflows/real-test.yaml b/.github/workflows/real-test.yaml index 365143b..5f97108 100644 --- a/.github/workflows/real-test.yaml +++ b/.github/workflows/real-test.yaml @@ -21,7 +21,7 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - - uses: ./.github/actions/uvbuild + - uses: $/.github/actions/uvbuild - name: Replace data in config files run: | sed -i "s/TEST_GITHUB_ORG/${{ secrets.TEST_GITHUB_ORG }}/g" tests/data/config/org_files/*.yaml diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml index dd04980..dad2d0f 100644 --- a/.github/workflows/test.yaml +++ b/.github/workflows/test.yaml @@ -34,7 +34,7 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - - uses: ./.github/actions/uvbuild + - uses: $/.github/actions/uvbuild with: python: ${{ matrix.python-version }} uv_args: --no-dev @@ -72,7 +72,7 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - - uses: ./.github/actions/uvbuild + - uses: $/.github/actions/uvbuild - name: Lint with ruff run: uv run ruff check @@ -82,7 +82,7 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - - uses: ./.github/actions/uvbuild + - uses: $/.github/actions/uvbuild - name: Check formatting with ruff run: uv run ruff format --check ty: @@ -91,7 +91,7 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - - uses: ./.github/actions/uvbuild + - uses: $/.github/actions/uvbuild - name: Test typing with ty run: uv run ty check