[3.14] Update pre-commit with zizmor and Ruff fixes (GH-143095) by hugovk · Pull Request #143102 · python/cpython
Merged
Conversation
(cherry picked from commit f783cc3) Co-authored-by: Hugo van Kemenade <1324225+hugovk@users.noreply.github.com>
Comment on lines +15 to +19
| cooldown: | ||
| # https://blog.yossarian.net/2025/11/21/We-should-all-be-using-dependency-cooldowns | ||
| # Cooldowns protect against supply chain attacks by avoiding the | ||
| # highest-risk window immediately after new releases. | ||
| default-days: 14 |
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I also included these cooldowns from #141866 to make zizmor happy.
hugovk
deleted the
backport-f783cc3-3.14
branch
Thanks @hugovk for the PR 🌮🎉.. I'm working now to backport this PR to: 3.13.
🐍🍒⛏🤖
Sorry, @hugovk, I could not cleanly backport this to 3.13 due to a conflict.
Please backport using cherry_picker on command line.
cherry_picker e6b11c886190ae83b9b54b9e026a5443c42bc19b 3.13
hugovk added a commit to hugovk/cpython that referenced this pull request
…pythonGH-143102) (cherry picked from commit e6b11c8) Co-authored-by: Hugo van Kemenade <1324225+hugovk@users.noreply.github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters