ci(zizmor): adopt 1.28.0 — fix what is wrong, justify what is not, and pin the premises - #130

Merged

wshallwshall merged 11 commits into

mainfrom

zizmor-1280-adoption

Aug 2, 2026

Commits on Aug 1, 2026

build(deps): bump the python-deps group across 1 directory with 3 updates

dependabot[bot]
authored and
wshallwshall
committed
chore(deps): resync exported lock files (DEP-1)

dependabot[bot]
authored and
wshallwshall
committed
fix(ci): label the setup-node pins v7.0.0 — the SHA has been v7 since 2026-07-26
wshallwshall
committed
ci(zizmor): retire the dead ignore entry and the claims that rotted with it
wshallwshall
committed
ci(zizmor): record bot-conditions on the resync gate as a justified non-finding
wshallwshall
committed
ci(zizmor): accept the archived CLA action as a dated residual (ADR 0034)
wshallwshall
committed
Merge remote-tracking branch 'origin/main' into zizmor-1280-adoption
wshallwshall
committed
ci: hand the setup-node label fix to the timeout PR to clear the collision gate
wshallwshall
committed
Revert "ci: hand the setup-node label fix to the timeout PR to clear the collision gate"
wshallwshall
committed

Commits on Aug 2, 2026