Movatterモバイル変換

shenxianpeng changed the title~~Update zizmor repo and doc links~~gh-140681: Update zizmor repo and doc links

bedevere-appbot mentioned this pull request

Freeze pre-commit hooks and update zizmor links#140681

Open

StanFromIreland reviewed

Misc/NEWS.d/next/Documentation/2025-10-27-17-14-34.gh-issue-140681.fMOJ9T.rst OutdatedShow resolvedHide resolved

shenxianpeng force-pushed theupdate-for-zizmor branch froma9210fb toae18393Compare

October 27, 2025 17:30

hugovk added the skip news label

Copy link

Member

hugovk commentedOct 27, 2025

We're in no rush here, it still works because of the redirects.

If we're going to update this, we might as well update the others (for example,prek autoupdate --jobs 0 orpre-commit autoupdate --jobs 0).

We can also now remove theself-hosted-runner of.github/actionlint.yaml.

And there might be a Sphinx Lint release fairly soon, so could also wait for that.

hugovk added the infraCI, GitHub Actions, buildbots, Dependabot, etc. label

Merge branch 'main' into update-for-zizmor

211c4ec

StanFromIreland requested a review fromwebknjaz as acode owner

February 22, 2026 10:26

webknjaz approved these changes

Feb 22, 2026

bedevere-appbot added awaiting core review and removed awaiting review labels

Feb 22, 2026

hugovk added3 commits

March 4, 2026 23:06

Merge remote-tracking branch 'upstream/main' into update-for-zizmor

8799b03

Update and freeze pre-commit hooks

59bb739

Remove fixed runner exception

235fad2

hugovk changed the title~~gh-140681: Update zizmor repo and doc links~~gh-140681: Freeze pre-commit hooks and update zizmor links

hugovk added needs backport to 3.13

bugs and security fixes

needs backport to 3.14bugs and security fixes labels

Copy link

Member

As this was still open, I've updated it to also freeze the pre-commit hooks, as discussed atpython/devguide#1748 (review). In short, if a repo became compromised, they could rewrite the tag to something malicious. Git SHAs can mitigate this.

If we're going to update this, we might as well update the others (for example,prek autoupdate --jobs 0 orpre-commit autoupdate --jobs 0).
We can also now remove theself-hosted-runner of.github/actionlint.yaml.

I did these too.

hugovk mentioned this pull request

Restructure index pagepython/devguide#1748

Merged

hugovk approved these changes

bedevere-appbot added awaiting merge and removed awaiting core review labels

webknjaz approved these changes

sethmlarson approved these changes

StanFromIreland approved these changes

hugovk merged commit11840ca intopython:main

53 checks passed

bedevere-appbot removed the awaiting merge label

Copy link

miss-islington-appbot commentedMar 5, 2026

Thanks@shenxianpeng for the PR, and@hugovk for merging it 🌮🎉.. I'm working now to backport this PR to: 3.13, 3.14.
🐍🍒⛏🤖

Copy link

miss-islington-appbot commentedMar 5, 2026

Sorry,@shenxianpeng and@hugovk, I could not cleanly backport this to3.14 due to a conflict.
Please backport usingcherry_picker on command line.

cherry_picker 11840ca99ae809c1c8401b4f34d2820de55e27a0 3.14

miss-islington-appbot assignedhugovk

Copy link

miss-islington-appbot commentedMar 5, 2026

Sorry,@shenxianpeng and@hugovk, I could not cleanly backport this to3.13 due to a conflict.
Please backport usingcherry_picker on command line.

cherry_picker 11840ca99ae809c1c8401b4f34d2820de55e27a0 3.13

hugovk added a commit to hugovk/cpython that referenced this pull request

[3.14]pythongh-140681: Freeze pre-commit hooks and update zizmor lin…

6e7327c

…ks (pythonGH-140682)(cherry picked from commit11840ca)Co-authored-by: Xianpeng Shen <xianpeng.shen@gmail.com>Co-authored-by: Stan Ulbrych <89152624+StanFromIreland@users.noreply.github.com>Co-authored-by: Hugo van Kemenade <1324225+hugovk@users.noreply.github.com>

Copy link

bedevere-appbot commentedMar 5, 2026

GH-145536 is a backport of this pull request to the3.14 branch.

bedevere-appbot removed the needs backport to 3.14bugs and security fixes label

hugovk added a commit to hugovk/cpython that referenced this pull request

pythongh-140681: Freeze pre-commit hooks and update zizmor links (pyt…

a64edd4

…hon#140682)Co-authored-by: Stan Ulbrych <89152624+StanFromIreland@users.noreply.github.com>Co-authored-by: Hugo van Kemenade <1324225+hugovk@users.noreply.github.com>

Copy link

Member

hugovk commentedMar 5, 2026•
edited
Loading

3.13 blocked byGH-144593 so cherry-picked into that one.

hugovk removed the needs backport to 3.13bugs and security fixes label