Repository navigation

Fix Python 3.8/3.9 jobs on Ubuntu 26.04, pin actions, and add zizmor - #2310

Merged

EliahKagan merged 13 commits into

gitpython-developers:mainfrom

EliahKagan:claude/ci-ubuntu-26-old-pythons-and-action-pins

Oct 25, 2026

Merged

Fix Python 3.8/3.9 jobs on Ubuntu 26.04, pin actions, and add zizmor#2310
EliahKagan merged 13 commits into
gitpython-developers:mainfrom
EliahKagan:claude/ci-ubuntu-26-old-pythons-and-action-pins

Commits on Oct 25, 2026
- ci: run Python 3.8 and 3.9 jobs on `ubuntu-24.04`
  
  EliahKagan
  and
  claude
  committed
  348ff73
- ci: pin all actions to full commit hashes
  
  EliahKagan
  and
  claude
  committed
  b63cce0
- ci(dependabot): remove obsolete `enable-beta-ecosystems`
  
  EliahKagan
  and
  claude
  committed
  44edd08
- ci(dependabot): wait 7 days before proposing new versions
  
  EliahKagan
  and
  claude
  committed
  86bd1bf
- ci(dependabot): check for action updates monthly
  
  EliahKagan
  and
  claude
  committed
  6bceffa
- ci(dependabot): group GitHub Actions updates into one pull request
  
  EliahKagan
  and
  claude
  committed
  c38f750
- ci: scan workflows with zizmor at the `pedantic` level
  
  EliahKagan
  and
  claude
  committed
  3d3fba9
- ci: stop `actions/checkout` from persisting credentials
  
  EliahKagan
  and
  claude
  committed
  63f42c9
- ci: fail if any `actions/checkout` step persists credentials
  
  EliahKagan
  and
  claude
  committed
  f130dd3
- ci(codeql): set empty workflow permissions and document the job's
  
  EliahKagan
  and
  claude
  committed
  e2d19ac
- ci: pass matrix values to shell scripts through the environment
  
  EliahKagan
  and
  claude
  committed
  7a7c288
- ci: run the `uv-sync` job on `ubuntu-slim`
  
  EliahKagan
  and
  claude
  committed
  5f44b7e
- ci: remove dead Python 3.8 condition from the mypy step
  
  EliahKagan
  and
  claude
  committed
  a938d65