django-render-static 3.5.2__tar.gz → 3.6.0__tar.gz

{django_render_static-3.5.2 → django_render_static-3.6.0}/.github/workflows/lint.yml

@@ -27,46 +27,37 @@ jobs:
       fail-fast: false
       matrix:
         # run static analysis on bleeding and trailing edges
-        python-version: ['3.10', '3.12', '3.14']
+        python-version: ['3.11', '3.15']
         django-version:
-          - 'dj42' # LTS April 2026
           - 'dj52' # LTS April 2028
-          - 'dj60' # April 2027
+          - 'dj61' # April 2027
         exclude:
-          - python-version: '3.12'
-            django-version: 'dj42'
-          - python-version: '3.14'
-            django-version: 'dj42'
-
-          - python-version: '3.10'
-            django-version: 'dj52'
-          - python-version: '3.14'
+          - python-version: '3.11'
+            django-version: 'dj61'
+          - python-version: '3.15'
             django-version: 'dj52'
 
-          - python-version: '3.10'
-            django-version: 'dj60'
-          - python-version: '3.12'
-            django-version: 'dj60'
-
     env:
       TEST_PYTHON_VERSION: ${{ matrix.python-version }}
       TEST_DJANGO_VERSION: ${{ matrix.django-version }}
 
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
         with:
           persist-credentials: false
       - name: Set up Python ${{ matrix.python-version }}
-        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405
+        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97
         id: sp
         with:
           python-version: ${{ matrix.python-version }}
           allow-prereleases: true
 
       - name: Install Just
-        uses: extractions/setup-just@f8a3cce218d9f83db3a2ecd90e41ac3de6cdfd9b
+        uses: extractions/setup-just@53165ef7e734c5c07cb06b3c8e7b647c5aa16db3
+        with:
+          just-version: '1.58.0'
       - name: Install uv
-        uses: astral-sh/setup-uv@5a095e7a2014a4212f075830d4f7277575a9d098
+        uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d
         with:
           enable-cache: false
       - name: Install Emacs
@@ -75,7 +66,7 @@ jobs:
           sudo apt install emacs
       - name: Setup tmate session
         if: ${{ github.event.inputs.debug == 'true' }}
-        uses: mxschmitt/action-tmate@c0afd6f790e3a5564914980036ebf83216678101
+        uses: mxschmitt/action-tmate@35b54afac29c97fb54faba5b513f8fbd1882f113
         timeout-minutes: 60
       - name: Run Static Analysis
         env:

{django_render_static-3.5.2 → django_render_static-3.6.0}/.github/workflows/release.yml

@@ -19,15 +19,14 @@ jobs:
     permissions:
       contents: read
       actions: write
-    uses: ./.github/workflows/lint.yml
+    uses: $/.github/workflows/lint.yml
 
   test:
     permissions:
       contents: read
       actions: write
-    uses: ./.github/workflows/test.yml
-    secrets:
-      CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
+      id-token: write
+    uses: $/.github/workflows/test.yml
 
   build:
     name: Build Package
@@ -39,22 +38,24 @@ jobs:
       PACKAGE_NAME: ${{ steps.set-package.outputs.package_name }}
       RELEASE_VERSION: ${{ steps.set-package.outputs.release_version }}
     steps:
-    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
       with:
         persist-credentials: false
     - name: Set up Python
-      uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405
+      uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97
       with:
         python-version: "3.14"
         allow-prereleases: true
     - name: Install uv
-      uses: astral-sh/setup-uv@5a095e7a2014a4212f075830d4f7277575a9d098
+      uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d
       with:
         enable-cache: false
         restore-cache: false
         save-cache: false
     - name: Setup Just
-      uses: extractions/setup-just@f8a3cce218d9f83db3a2ecd90e41ac3de6cdfd9b
+      uses: extractions/setup-just@53165ef7e734c5c07cb06b3c8e7b647c5aa16db3
+      with:
+        just-version: '1.58.0'
     - name: Verify Tag
       run: |
         TAG_NAME=${GITHUB_REF#refs/tags/}
@@ -75,7 +76,7 @@ jobs:
     - name: Build the binary wheel and a source tarball
       run: just build
     - name: Store the distribution packages
-      uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f
+      uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
       with:
         name: python-package-distributions
         path: dist/
@@ -99,12 +100,12 @@ jobs:
       id-token: write  # IMPORTANT: mandatory for trusted publishing
     steps:
     - name: Download all the dists
-      uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3
+      uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
       with:
         name: python-package-distributions
         path: dist/
     - name: Publish distribution to PyPI
-      uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e
+      uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33
 
   github-release:
     name: Publish GitHub Release
@@ -119,12 +120,12 @@ jobs:
 
     steps:
     - name: Download all the dists
-      uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3
+      uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
       with:
         name: python-package-distributions
         path: dist/
     - name: Sign the dists with Sigstore
-      uses: sigstore/gh-action-sigstore-python@a5caf349bc536fbef3668a10ed7f5cd309a4b53d
+      uses: sigstore/gh-action-sigstore-python@790bc6befb9d733738f18d8f895854b453640ec9
       with:
         inputs: >-
           ./dist/*.tar.gz

{django_render_static-3.5.2 → django_render_static-3.6.0}/.github/workflows/scorecard.yml

@@ -15,18 +15,21 @@ jobs:
   analysis:
     name: Scorecard analysis
     runs-on: ubuntu-latest
+    environment:
+      name: scorecard
+      deployment: false  # Prevents creating a GitHub deployment object
     permissions:
       security-events: write
       id-token: write
 
     steps:
       - name: "Checkout code"
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
         with:
           persist-credentials: false
 
       - name: "Run analysis"
-        uses: ossf/scorecard-action@4eaacf0543bb3f2c246792bd56e8cdeffafb205a
+        uses: ossf/scorecard-action@2d1146689b8cda280b9bc96326124645441f03bc
         with:
           results_file: results.sarif
           results_format: sarif
@@ -48,7 +51,7 @@ jobs:
       # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
       # format to the repository Actions tab.
       - name: "Upload artifact"
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
         with:
           name: SARIF file
           path: results.sarif
@@ -57,6 +60,6 @@ jobs:
       # Upload the results to GitHub's code scanning dashboard (optional).
       # Commenting out will disable upload of results to your repo's Code Scanning dashboard
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@0d579ffd059c29b07949a3cce3983f0780820c98
+        uses: github/codeql-action/upload-sarif@cdf488f595d80d6e07e03d4674febd5ab45fa938
         with:
           sarif_file: results.sarif

{django_render_static-3.5.2 → django_render_static-3.6.0}/.github/workflows/test.yml

@@ -17,9 +17,6 @@ on:
       - "pyproject.toml"
       - "justfile"
   workflow_call:
-    secrets:
-      CODECOV_TOKEN:
-        required: true
   workflow_dispatch:
     inputs:
       debug:
@@ -42,21 +39,15 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        python-version: ['3.10', '3.11', '3.12', '3.13', '3.14']
+        python-version: ['3.11', '3.12', '3.13', '3.14', '3.15']
         django-version:
-          - 'dj42' # LTS April 2026
           - 'dj52' # LTS April 2028
-          - 'dj60' # April 2027
+          - 'dj61' # April 2027
         exclude:
-          - python-version: '3.13'
-            django-version: 'dj42'
-          - python-version: '3.14'
-            django-version: 'dj42'
-
-          - python-version: '3.10'
-            django-version: 'dj60'
           - python-version: '3.11'
-            django-version: 'dj60'
+            django-version: 'dj61'
+          - python-version: '3.15'
+            django-version: 'dj52'
 
     env:
       COVERAGE_FILE: linux-py${{ matrix.python-version }}-${{ matrix.django-version }}.coverage
@@ -65,19 +56,21 @@ jobs:
       TEST_DJANGO_VERSION: ${{ matrix.django-version }}
 
     steps:
-    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
       with:
         persist-credentials: false
     - name: Set up Python ${{ matrix.python-version }}
-      uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405
+      uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97
       id: sp
       with:
         python-version: ${{ matrix.python-version }}
         allow-prereleases: true
     - name: Setup Just
-      uses: extractions/setup-just@f8a3cce218d9f83db3a2ecd90e41ac3de6cdfd9b
+      uses: extractions/setup-just@53165ef7e734c5c07cb06b3c8e7b647c5aa16db3
+      with:
+        just-version: '1.58.0'
     - name: Install uv
-      uses: astral-sh/setup-uv@5a095e7a2014a4212f075830d4f7277575a9d098
+      uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d
       with:
         enable-cache: false
     - name: Install Emacs
@@ -86,7 +79,7 @@ jobs:
         sudo apt install emacs
     - name: Setup tmate session
       if: ${{ github.event.inputs.debug == 'true' }}
-      uses: mxschmitt/action-tmate@c0afd6f790e3a5564914980036ebf83216678101
+      uses: mxschmitt/action-tmate@35b54afac29c97fb54faba5b513f8fbd1882f113
       with:
         detached: true
       timeout-minutes: 60
@@ -97,12 +90,12 @@ jobs:
         just test-all -p "$TEST_PYTHON" --group "$TEST_DJANGO_VERSION"
 
     - name: Store coverage files
-      uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f
+      uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
       with:
         name: ${{ env.COVERAGE_FILE }}
         path: ${{ env.COVERAGE_FILE }}
     - name: Store env files
-      uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f
+      uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
       with:
         name: ${{ env.ENV_FILE }}
         path: requirements-test*.txt
@@ -114,27 +107,16 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        python-version: ['3.10', '3.12', '3.14']
+        python-version: ['3.11', '3.15']
         django-version:
-          - 'dj42' # LTS April 2026
           - 'dj52' # LTS April 2028
-          - 'dj60' # April 2027
+          - 'dj61' # April 2027
         exclude:
-          - python-version: '3.12'
-            django-version: 'dj42'
-          - python-version: '3.14'
-            django-version: 'dj42'
-
-          - python-version: '3.10'
-            django-version: 'dj52'
-          - python-version: '3.14'
+          - python-version: '3.11'
+            django-version: 'dj61'
+          - python-version: '3.15'
             django-version: 'dj52'
 
-          - python-version: '3.10'
-            django-version: 'dj60'
-          - python-version: '3.12'
-            django-version: 'dj60'
-
     env:
       COVERAGE_FILE: macos-py${{ matrix.python-version }}-${{ matrix.django-version }}.coverage
       ENV_FILE: macos-py${{ matrix.python-version }}-${{ matrix.django-version }}
@@ -142,19 +124,21 @@ jobs:
       TEST_DJANGO_VERSION: ${{ matrix.django-version }}
 
     steps:
-    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
       with:
         persist-credentials: false
     - name: Set up Python ${{ matrix.python-version }}
-      uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405
+      uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97
       id: sp
       with:
         python-version: ${{ matrix.python-version }}
         allow-prereleases: true
     - name: Setup Just
-      uses: extractions/setup-just@f8a3cce218d9f83db3a2ecd90e41ac3de6cdfd9b
+      uses: extractions/setup-just@53165ef7e734c5c07cb06b3c8e7b647c5aa16db3
+      with:
+        just-version: '1.58.0'
     - name: Install uv
-      uses: astral-sh/setup-uv@5a095e7a2014a4212f075830d4f7277575a9d098
+      uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d
       with:
         enable-cache: false
     - name: install-emacs-macos
@@ -163,7 +147,7 @@ jobs:
         brew install emacs
     - name: Setup tmate session
       if: ${{ github.event.inputs.debug == 'true' }}
-      uses: mxschmitt/action-tmate@c0afd6f790e3a5564914980036ebf83216678101
+      uses: mxschmitt/action-tmate@35b54afac29c97fb54faba5b513f8fbd1882f113
       with:
         detached: true
       timeout-minutes: 60
@@ -174,12 +158,12 @@ jobs:
         just test-all -p "$TEST_PYTHON" --group "$TEST_DJANGO_VERSION"
 
     - name: Store coverage files
-      uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f
+      uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
       with:
         name: ${{ env.COVERAGE_FILE }}
         path: ${{ env.COVERAGE_FILE }}
     - name: Store env files
-      uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f
+      uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
       with:
         name: ${{ env.ENV_FILE }}
         path: requirements-test*.txt
@@ -194,27 +178,16 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        python-version: ['3.10', '3.12', '3.14']
+        python-version: ['3.11', '3.15']
         django-version:
-          - 'dj42' # LTS April 2026
           - 'dj52' # LTS April 2028
-          - 'dj60' # April 2027
+          - 'dj61' # April 2027
         exclude:
-          - python-version: '3.12'
-            django-version: 'dj42'
-          - python-version: '3.14'
-            django-version: 'dj42'
-
-          - python-version: '3.10'
-            django-version: 'dj52'
-          - python-version: '3.14'
+          - python-version: '3.11'
+            django-version: 'dj61'
+          - python-version: '3.15'
             django-version: 'dj52'
 
-          - python-version: '3.10'
-            django-version: 'dj60'
-          - python-version: '3.12'
-            django-version: 'dj60'
-
     env:
       COVERAGE_FILE: windows-py${{ matrix.python-version }}-${{ matrix.django-version }}.coverage
       ENV_FILE: windows-py${{ matrix.python-version }}-${{ matrix.django-version }}
@@ -222,27 +195,29 @@ jobs:
       TEST_DJANGO_VERSION: ${{ matrix.django-version }}
 
     steps:
-    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
       with:
         persist-credentials: false
     - name: Set up Python ${{ matrix.python-version }}
-      uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405
+      uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97
       id: sp
       with:
         python-version: ${{ matrix.python-version }}
         allow-prereleases: true
     - name: Setup Just
-      uses: extractions/setup-just@f8a3cce218d9f83db3a2ecd90e41ac3de6cdfd9b
+      uses: extractions/setup-just@53165ef7e734c5c07cb06b3c8e7b647c5aa16db3
+      with:
+        just-version: '1.58.0'
     - name: Install uv
-      uses: astral-sh/setup-uv@5a095e7a2014a4212f075830d4f7277575a9d098
+      uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d
       with:
         enable-cache: false
     - name: install-vim-windows
       if: ${{ github.event.inputs.debug == 'true' }}
-      uses: rhysd/action-setup-vim@19e3dd31a84dbc2c5445d65e9b363f616cab96c1
+      uses: rhysd/action-setup-vim@febef33995d6649302e9d88dda81e071b68f16a7
     - name: Setup tmate session
       if: ${{ github.event.inputs.debug == 'true' }}
-      uses: mxschmitt/action-tmate@c0afd6f790e3a5564914980036ebf83216678101
+      uses: mxschmitt/action-tmate@35b54afac29c97fb54faba5b513f8fbd1882f113
       with:
         detached: true
       timeout-minutes: 60
@@ -254,12 +229,12 @@ jobs:
         if ($LASTEXITCODE -ne 0) { exit $LASTEXITCODE }
 
     - name: Store coverage files
-      uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f
+      uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
       with:
         name: ${{ env.COVERAGE_FILE }}
         path: ${{ env.COVERAGE_FILE }}
     - name: Store env files
-      uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f
+      uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
       with:
         name: ${{ env.ENV_FILE }}
         path: requirements-test*.txt
@@ -267,21 +242,26 @@ jobs:
   coverage-combine:
     needs: [test-linux, test-macos, test-windows]
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      id-token: write
 
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
         with:
           persist-credentials: false
-      - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405
+      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97
         id: sp
         with:
           python-version: '3.14'
           allow-prereleases: true
 
       - name: Setup Just
-        uses: extractions/setup-just@f8a3cce218d9f83db3a2ecd90e41ac3de6cdfd9b
+        uses: extractions/setup-just@53165ef7e734c5c07cb06b3c8e7b647c5aa16db3
+        with:
+          just-version: '1.58.0'
       - name: Install uv
-        uses: astral-sh/setup-uv@5a095e7a2014a4212f075830d4f7277575a9d098
+        uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d
         with:
           enable-cache: false
       - name: Setup venv
@@ -291,7 +271,7 @@ jobs:
           just setup "$TEST_PYTHON"
 
       - name: Get coverage files
-        uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
         with:
           pattern: "*.coverage"
           merge-multiple: true
@@ -299,8 +279,8 @@ jobs:
       - run: just coverage
 
       - name: Upload coverage to Codecov
-        uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de
+        uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f
         with:
-          token: ${{ secrets.CODECOV_TOKEN }}
+          use_oidc: true
           files:
             ./coverage.xml

{django_render_static-3.5.2 → django_render_static-3.6.0}/.github/workflows/update_coc.yml

@@ -1,26 +1,29 @@
 name: Update Code of Conduct
 
-permissions: read-all
+permissions:
+  contents: read
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
 
 on:
   workflow_dispatch:
   # Run every Sunday at midnight UTC (00:00) - triggered by webhook?
   schedule:
-    - cron: '0 0 * * SUN'
-
+    - cron: "0 0 * * SUN"
 
 jobs:
   update_code_of_conduct:
     permissions:
-     contents: write
-     issues: write
-     pull-requests: write
+      contents: write # needed for CoC PR
+      pull-requests: write # needed for CoC PR
 
     runs-on: ubuntu-latest
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
         with:
           persist-credentials: false
 
@@ -43,12 +46,12 @@ jobs:
       # Create a pull request to merge the changes into the main branch
       - name: Create Pull Request
         if: steps.check_changes.outputs.changed == 'true'
-        uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0
+        uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1
         with:
-            token: ${{ secrets.GITHUB_TOKEN }}
-            branch: bot-update-coc
-            add-paths: |
-                CODE_OF_CONDUCT.md
-            title: "🤖 Update Code of Conduct 🤖"
-            body: "Update the Code of Conduct with the latest version from the django-commons repository."
-            commit-message: "Update CODE_OF_CONDUCT.md from django-commons"
+          token: ${{ secrets.GITHUB_TOKEN }}
+          branch: bot-update-coc
+          add-paths: |
+            CODE_OF_CONDUCT.md
+          title: "🤖 Update Code of Conduct 🤖"
+          body: "Update the Code of Conduct with the latest version from the django-commons repository."
+          commit-message: "Update CODE_OF_CONDUCT.md from django-commons"

{django_render_static-3.5.2 → django_render_static-3.6.0}/.github/workflows/zizmor.yml

@@ -24,12 +24,12 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
         with:
           persist-credentials: false
 
       - name: Set up Rust
-        uses: actions-rust-lang/setup-rust-toolchain@a0b538fa0b742a6aa35d6e2c169b4bd06d225a98
+        uses: actions-rust-lang/setup-rust-toolchain@166cdcfd11aee3cb47222f9ddb555ce30ddb9659
       - name: Install jq
         run: |
           sudo apt-get update
@@ -43,14 +43,14 @@ jobs:
           zizmor --format sarif .github/workflows/ > zizmor.sarif
 
       - name: Upload analysis results
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
         with:
           name: zizmor-results
           path: zizmor.sarif
           retention-days: 7
 
       - name: Upload to code-scanning
-        uses: github/codeql-action/upload-sarif@0d579ffd059c29b07949a3cce3983f0780820c98
+        uses: github/codeql-action/upload-sarif@cdf488f595d80d6e07e03d4674febd5ab45fa938
         with:
           sarif_file: zizmor.sarif
 

django_render_static-3.6.0/.github/zizmor.yml

@@ -0,0 +1,6 @@
+rules:
+  anonymous-definition:
+    disable: true
+  superfluous-actions:
+    ignore:
+      - update_coc.yml:49

{django_render_static-3.5.2 → django_render_static-3.6.0}/CLAUDE.md

@@ -28,7 +28,7 @@ just manage <cmd>   # run Django management commands using tests.settings
 
 Tests use `pytest-django` with `DJANGO_SETTINGS_MODULE=tests.settings`. The `just test-all` recipe runs the suite twice in isolated venvs: once with all optional extras (PyYAML, Jinja2) and once without.
 
-In CI, Django version matrix entries are `dj42`/`dj52`/`dj60` — these map to `[dependency-groups]` in `pyproject.toml` and are passed as `--group` flags to `uv run --isolated`. No `test-lock` or venv mutation is needed.
+In CI, Django version matrix entries are `dj52`/`dj61` — these map to `[dependency-groups]` in `pyproject.toml` and are passed as `--group` flags to `uv run --isolated`. No `test-lock` or venv mutation is needed.
 
 100% code coverage is required before PRs are accepted.