hydrologie / xdatasets / 11016175570

20%

master: 21%

push

github

Use GitHub Helper bot, fast-forward cookiecutter (#156)

### What kind of change does this PR introduce?

* Enables the Hydrologie Helper Bot to push signed commits to main
* Fast-forwards the cookiecutter
* Pins and synchronizes several dependencies

### Does this PR introduce a breaking change?

No.

### Other information:

"Why use a helper bot?"

Glad you asked. The commits that are coming from the workflow currently
are "borrowing" a token I made then overwriting the committer
information and, as such, the GPG signature is invalid. For security
purposes, this makes it look like someone stole my account and committed
changes pretending to be someone else, which is effectively what it is
doing.

The helper bot is a verified way of indicating that these commits are
genuine and coming from a verified source (by way of GPG signature). The
bot makes a one-time-use token, creates a commit with it, pushes the
changes, then destroys that token so that the risk of it leaking is
diminished.

1 of 1 new or added line in 1 file covered. (100.0%)

96 of 471 relevant lines covered (20.38%)

1.63 hits per line