Tatsh / wiswa / 26755118247 / 3

100%

master: 100%

push

github

cruft: update

Regenerate after the supply-chain hardening and wiswa-vcs 0.1.0 bump:

- Workflows now pin actions to commit SHAs, set persist-credentials: false
  on every checkout, scope publish write permissions to the job level,
  disable caching in release builds, and create draft releases with the
  gh CLI.
- New .github/zizmor.yml ignoring the accepted workflow_run finding.
- Add the zizmor pre-commit hook.
- Refresh CITATION.cff, package.json, pyproject.toml, and uv.lock for the
  wiswa-vcs and wiswa-typing 0.1.0 dependency bumps; drop the now-unneeded
  oidc dictionary entry.

Signed-off-by: Andrew Udvare <audvare@gmail.com>

372 of 372 branches covered (100.0%)

Branch coverage included in aggregate %.

1953 of 1953 relevant lines covered (100.0%)

1.0 hits per line