chore(ci): bump the actions group with 4 updates

[dependabot]

Bumps the actions group with 4 updates: radiorabe/actions/.github/workflows/test-pre-commit.yaml, radiorabe/actions/.github/workflows/test-python-poetry.yaml, radiorabe/actions/.github/workflows/release-python-poetry.yaml and radiorabe/actions/.github/workflows/semantic-release.yaml.

Updates radiorabe/actions/.github/workflows/test-pre-commit.yaml from 0.41.3 to 0.42.0

Release notes

Sourced from radiorabe/actions/.github/workflows/test-pre-commit.yaml's releases.

v0.42.0

0.42.0 (2026-03-29)

This releases adds name: labels for all jobs and steps, users might need to update required actions.

Feature

• add test-github-actions reusable workflow (zizmor SAST) (#204) (47999612). Implementing this action is strongly encourage and can be done by adding the following to an existing pull_request: workflow like test.yaml.

  github-actions:
    permissions:
      contents: read
      security-events: write # so zizmor can publish results to the Security tab
    uses: radiorabe/actions/.github/workflows/test-github-actions.yaml@479996126a091287dc3fd349786f6f8a6dd1b23c # v0.42.0

Zizmor Refactoring

• release-mkdocs: implement zizmor recommendations and pin mkdocs<2.0 (#207) (4dd8c17a)
• release-python-poetry: implement zizmor recommendations (#206) (45fae149)
• test-pre-commit: implement zizmor recommendations (#203) (f24dab70)
• release-ansible-collection: implement zizmor recommendations (#202) (59bbe0f9)
• release-container: implement zizmor recommendations (#200) (94bcf38a)
• schedule-trivy: implement zizmor recommendations (#201) (cd7eedcb)

Chores

• formatting and names (#205) (89c02998)
• Update label for permissions in new workflow template (#198) (0b42ab15)
• security: Implement "ENISA TA for Secure Use of Package Managers" (#197) (d3e41444)
• add empty top-level permission blocks for all actions (#193) (19453f78)
• don't persist credentials in actions/checkout (#192) (d2fd8858)

Commits

• 4799961 feat: add test-github-actions reusable workflow (zizmor SAST) (#204)
• 4dd8c17 refactor(release-mkdocs): implement zizmor recommendations and pin mk… (#207)
• 45fae14 refactor(release-python-poetry): implement zizmor recommendations (#206)
• 89c0299 chore: formatting and names (#205)
• f24dab7 refactor(test-pre-commit): implement zizmor recommendations (#203)
• 59bbe0f refactor(release-ansible-collection): implement zizmor recommendations (#202)
• 94bcf38 refactor(release-container): implement zizmor recommendations (#200)
• cd7eedc refactor(schedule-trivy): implement zizmor recommendations (#201)
• 0b42ab1 chore: Update label for permissions in new workflow template (#198)
• d3e4144 chore(security): Implement "ENISA TA for Secure Use of Package Managers" (#197)
• Additional commits viewable in compare view

Updates radiorabe/actions/.github/workflows/test-python-poetry.yaml from 0.41.3 to 0.42.0

Release notes

Sourced from radiorabe/actions/.github/workflows/test-python-poetry.yaml's releases.

v0.42.0

0.42.0 (2026-03-29)

This releases adds name: labels for all jobs and steps, users might need to update required actions.

Feature

• add test-github-actions reusable workflow (zizmor SAST) (#204) (47999612). Implementing this action is strongly encourage and can be done by adding the following to an existing pull_request: workflow like test.yaml.

  github-actions:
    permissions:
      contents: read
      security-events: write # so zizmor can publish results to the Security tab
    uses: radiorabe/actions/.github/workflows/test-github-actions.yaml@479996126a091287dc3fd349786f6f8a6dd1b23c # v0.42.0

Zizmor Refactoring

• release-mkdocs: implement zizmor recommendations and pin mkdocs<2.0 (#207) (4dd8c17a)
• release-python-poetry: implement zizmor recommendations (#206) (45fae149)
• test-pre-commit: implement zizmor recommendations (#203) (f24dab70)
• release-ansible-collection: implement zizmor recommendations (#202) (59bbe0f9)
• release-container: implement zizmor recommendations (#200) (94bcf38a)
• schedule-trivy: implement zizmor recommendations (#201) (cd7eedcb)

Chores

• formatting and names (#205) (89c02998)
• Update label for permissions in new workflow template (#198) (0b42ab15)
• security: Implement "ENISA TA for Secure Use of Package Managers" (#197) (d3e41444)
• add empty top-level permission blocks for all actions (#193) (19453f78)
• don't persist credentials in actions/checkout (#192) (d2fd8858)

Commits

• 4799961 feat: add test-github-actions reusable workflow (zizmor SAST) (#204)
• 4dd8c17 refactor(release-mkdocs): implement zizmor recommendations and pin mk… (#207)
• 45fae14 refactor(release-python-poetry): implement zizmor recommendations (#206)
• 89c0299 chore: formatting and names (#205)
• f24dab7 refactor(test-pre-commit): implement zizmor recommendations (#203)
• 59bbe0f refactor(release-ansible-collection): implement zizmor recommendations (#202)
• 94bcf38 refactor(release-container): implement zizmor recommendations (#200)
• cd7eedc refactor(schedule-trivy): implement zizmor recommendations (#201)
• 0b42ab1 chore: Update label for permissions in new workflow template (#198)
• d3e4144 chore(security): Implement "ENISA TA for Secure Use of Package Managers" (#197)
• Additional commits viewable in compare view

Updates radiorabe/actions/.github/workflows/release-python-poetry.yaml from 0.41.3 to 0.42.0

Release notes

Sourced from radiorabe/actions/.github/workflows/release-python-poetry.yaml's releases.

v0.42.0

0.42.0 (2026-03-29)

This releases adds name: labels for all jobs and steps, users might need to update required actions.

Feature

• add test-github-actions reusable workflow (zizmor SAST) (#204) (47999612). Implementing this action is strongly encourage and can be done by adding the following to an existing pull_request: workflow like test.yaml.

  github-actions:
    permissions:
      contents: read
      security-events: write # so zizmor can publish results to the Security tab
    uses: radiorabe/actions/.github/workflows/test-github-actions.yaml@479996126a091287dc3fd349786f6f8a6dd1b23c # v0.42.0

Zizmor Refactoring

• release-mkdocs: implement zizmor recommendations and pin mkdocs<2.0 (#207) (4dd8c17a)
• release-python-poetry: implement zizmor recommendations (#206) (45fae149)
• test-pre-commit: implement zizmor recommendations (#203) (f24dab70)
• release-ansible-collection: implement zizmor recommendations (#202) (59bbe0f9)
• release-container: implement zizmor recommendations (#200) (94bcf38a)
• schedule-trivy: implement zizmor recommendations (#201) (cd7eedcb)

Chores

• formatting and names (#205) (89c02998)
• Update label for permissions in new workflow template (#198) (0b42ab15)
• security: Implement "ENISA TA for Secure Use of Package Managers" (#197) (d3e41444)
• add empty top-level permission blocks for all actions (#193) (19453f78)
• don't persist credentials in actions/checkout (#192) (d2fd8858)

Commits

• 4799961 feat: add test-github-actions reusable workflow (zizmor SAST) (#204)
• 4dd8c17 refactor(release-mkdocs): implement zizmor recommendations and pin mk… (#207)
• 45fae14 refactor(release-python-poetry): implement zizmor recommendations (#206)
• 89c0299 chore: formatting and names (#205)
• f24dab7 refactor(test-pre-commit): implement zizmor recommendations (#203)
• 59bbe0f refactor(release-ansible-collection): implement zizmor recommendations (#202)
• 94bcf38 refactor(release-container): implement zizmor recommendations (#200)
• cd7eedc refactor(schedule-trivy): implement zizmor recommendations (#201)
• 0b42ab1 chore: Update label for permissions in new workflow template (#198)
• d3e4144 chore(security): Implement "ENISA TA for Secure Use of Package Managers" (#197)
• Additional commits viewable in compare view

Updates radiorabe/actions/.github/workflows/semantic-release.yaml from 0.41.3 to 0.42.0

Release notes

Sourced from radiorabe/actions/.github/workflows/semantic-release.yaml's releases.

v0.42.0

0.42.0 (2026-03-29)

This releases adds name: labels for all jobs and steps, users might need to update required actions.

Feature

• add test-github-actions reusable workflow (zizmor SAST) (#204) (47999612). Implementing this action is strongly encourage and can be done by adding the following to an existing pull_request: workflow like test.yaml.

  github-actions:
    permissions:
      contents: read
      security-events: write # so zizmor can publish results to the Security tab
    uses: radiorabe/actions/.github/workflows/test-github-actions.yaml@479996126a091287dc3fd349786f6f8a6dd1b23c # v0.42.0

Zizmor Refactoring

• release-mkdocs: implement zizmor recommendations and pin mkdocs<2.0 (#207) (4dd8c17a)
• release-python-poetry: implement zizmor recommendations (#206) (45fae149)
• test-pre-commit: implement zizmor recommendations (#203) (f24dab70)
• release-ansible-collection: implement zizmor recommendations (#202) (59bbe0f9)
• release-container: implement zizmor recommendations (#200) (94bcf38a)
• schedule-trivy: implement zizmor recommendations (#201) (cd7eedcb)

Chores

• formatting and names (#205) (89c02998)
• Update label for permissions in new workflow template (#198) (0b42ab15)
• security: Implement "ENISA TA for Secure Use of Package Managers" (#197) (d3e41444)
• add empty top-level permission blocks for all actions (#193) (19453f78)
• don't persist credentials in actions/checkout (#192) (d2fd8858)

Commits

• 4799961 feat: add test-github-actions reusable workflow (zizmor SAST) (#204)
• 4dd8c17 refactor(release-mkdocs): implement zizmor recommendations and pin mk… (#207)
• 45fae14 refactor(release-python-poetry): implement zizmor recommendations (#206)
• 89c0299 chore: formatting and names (#205)
• f24dab7 refactor(test-pre-commit): implement zizmor recommendations (#203)
• 59bbe0f refactor(release-ansible-collection): implement zizmor recommendations (#202)
• 94bcf38 refactor(release-container): implement zizmor recommendations (#200)
• cd7eedc refactor(schedule-trivy): implement zizmor recommendations (#201)
• 0b42ab1 chore: Update label for permissions in new workflow template (#198)
• d3e4144 chore(security): Implement "ENISA TA for Secure Use of Package Managers" (#197)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-advanced-security]

You are seeing this message because GitHub Code Scanning has recently been set up for this repository, or this pull request contains the workflow file for the Code Scanning tool.

What Enabling Code Scanning Means:

• The 'Security' tab will display more code scanning analysis results (e.g., for the default branch).
• Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results.
• You will be able to see the analysis results for the pull request's branch on this overview once the scans have completed and the checks have passed.

For more information about GitHub Code Scanning, check out the documentation.