From 0d53b11096927692693195270e1165edbfa2f3f3 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 7 Sep 2026 21:42:58 +0000
Subject: [PATCH 1/2] build(deps): bump the test-and-lint-dependencies group
 with 3 updates

Bumps the test-and-lint-dependencies group with 3 updates: [ruff](https://github.com/astral-sh/ruff), [zizmor](https://github.com/zizmorcore/zizmor) and [coverage](https://github.com/coveragepy/coveragepy).


Updates `ruff` from 0.16.4 to 0.16.5
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](https://github.com/astral-sh/ruff/compare/0.16.4...0.16.5)

Updates `zizmor` from 1.29.0 to 1.30.0
- [Release notes](https://github.com/zizmorcore/zizmor/releases)
- [Changelog](https://github.com/zizmorcore/zizmor/blob/main/docs/release-notes.md)
- [Commits](https://github.com/zizmorcore/zizmor/compare/v1.29.0...v1.30.0)

Updates `coverage` from 7.15.4 to 7.16.0
- [Release notes](https://github.com/coveragepy/coveragepy/releases)
- [Changelog](https://github.com/coveragepy/coveragepy/blob/main/CHANGES.rst)
- [Commits](https://github.com/coveragepy/coveragepy/compare/7.15.4...7.16.0)

---
updated-dependencies:
- dependency-name: ruff
  dependency-version: 0.16.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: test-and-lint-dependencies
- dependency-name: zizmor
  dependency-version: 1.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: test-and-lint-dependencies
- dependency-name: coverage
  dependency-version: 7.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: test-and-lint-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 requirements/lint.txt | 4 ++--
 requirements/test.txt | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/requirements/lint.txt b/requirements/lint.txt
index c9a37ff63e..2a285efb60 100644
--- a/requirements/lint.txt
+++ b/requirements/lint.txt
@@ -6,9 +6,9 @@
 # Lint tools
 # (We are not so interested in the specific versions of the tools: the versions
 # are pinned to prevent unexpected linting failures when tools update)
-ruff==0.16.4
+ruff==0.16.5
 mypy==2.3.1
-zizmor==1.29.0
+zizmor==1.30.0
 
 # Required for type stubs
 freezegun==1.5.5
diff --git a/requirements/test.txt b/requirements/test.txt
index 59a97b8472..c789c20263 100644
--- a/requirements/test.txt
+++ b/requirements/test.txt
@@ -4,5 +4,5 @@
 -r pinned.txt
 
 # coverage measurement
-coverage[toml]==7.15.4
+coverage[toml]==7.16.0
 freezegun==1.5.5

From 9074214b17278e5b87de7dc71e692ce667043cec Mon Sep 17 00:00:00 2001
From: Jussi Kukkonen <jkukkonen@google.com>
Date: Tue, 8 Sep 2026 10:53:11 +0300
Subject: [PATCH 2/2] workflows: use self-repo syntax (from zizmor)

Signed-off-by: Jussi Kukkonen <jkukkonen@google.com>
---
 .github/workflows/cd.yml | 4 ++--
 .github/workflows/ci.yml | 4 ++--
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/cd.yml b/.github/workflows/cd.yml
index 5f6a3e93da..f926bb2291 100644
--- a/.github/workflows/cd.yml
+++ b/.github/workflows/cd.yml
@@ -10,7 +10,7 @@ permissions: {}
 
 jobs:
   test:
-    uses: ./.github/workflows/_test.yml
+    uses: $/.github/workflows/_test.yml
 
   build:
     name: Build
@@ -118,4 +118,4 @@ jobs:
         
         env:
           REF_NAME: ${{ github.ref_name }}
-          RELEASE_ID: ${{ needs.candidate_release.outputs.release_id }}
\ No newline at end of file
+          RELEASE_ID: ${{ needs.candidate_release.outputs.release_id }}
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 9fc17c3a81..b5acdfa356 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -12,6 +12,6 @@ permissions: {}
 
 jobs:
   test:
-    uses: ./.github/workflows/_test.yml
+    uses: $/.github/workflows/_test.yml
   test-with-sslib-main:
-    uses: ./.github/workflows/_test_sslib_main.yml
+    uses: $/.github/workflows/_test_sslib_main.yml