Bump kdeldycke/workflows from 4.17.5 to 4.23.0

[dependabot]

Bumps kdeldycke/workflows from 4.17.5 to 4.23.0.

Release notes

Sourced from kdeldycke/workflows's releases.

v4.23.0

Changes

• Remove maximum capped version of all dependencies (relax all ~= specifiers to >=). This gives more freedom to downstream and upstream packagers. Document each minimal version choice.
• Add new --command parameter to gha-utils test-plan command as an alias to --binary.
• Allow gha-utils test-plan to accept a full command line with parameters as input for --command/--binary option.
• Self-check of gha-utils test-plan command in its own test plan.
• Dynamiccaly deepen shallow clones of Git repositories when fetching new commit ranges.
• Only runs optimize-images job if there are image files in the repository.
• Move runner architecture validation to gha-utils-only job.
• Remove dependency on mdformat_tables plugin which has been merged into mdformat-gfm.
• Use un-released versions of mdformat plugins until their compatibility is restored.
• Move all typing-related imports behind a hard-coded TYPE_CHECKING guard to avoid runtime imports.
• Fix builds on macos-26.
• Skip tests on intermediate Python versions (3.12 and 3.13) to reduce CI load.

🐍 Available on PyPi.

v4.22.0

Changes

• Add new image_files field to gha-utils metadata.
• Only runs lint-yaml job if there are YAML files in the repository.
• Only runs lint-github-action job if there are workflow files in the repository.
• Only runs broken-links job if there are Markdown or rST files in the repository.
• Only runs update-mailmap job if .mailmap file exists.
• The gha-utils test-plan command now reports the detailed line differences when a *_regex_fullmatch check fails.
• Fix commit_range field when there is only one commit in the range.
• Flag macos-26 as unstable target by default for Nuitka builds while we wait for a solution upstream.
• Upload Nuitka crash report as artifacts when the build fails.
• Validate architecture of binaries produced by Nuitka builds.

🐍 Available on PyPi.

v4.21.0

Changes

• Use astral-sh/[email protected] action to install uv instead of manually installing it with pip.
• Remove requirements/uv.txt file.
• Add new fields to gha-utils metadata:
  • yaml_files
  • workflow_files
  • mailmap_exists
• Check that start and end commit of commit_range exist in the repository before trying to traverse commits with PyDriller.
• Add check-runners job to always verify the architecture of each runner used to compile binaries with Nuitka.
• Use macos-28 runner instead of macos-15 to build binaries for arm64.
• Use macos-15-intel runner instead of macos-13 to build binaries for x64.
• Run tests on macos-28 and macos-15-intel runners instead of macos-15 and macos-13.
• Only parse .gitignore file once, when first needed, and cache the matching function.
• Run gha-utils commands without --verbosity DEBUG option in jobs to reduce noise.

... (truncated)

Changelog

Sourced from kdeldycke/workflows's changelog.

4.23.0 (2025-10-25)

• Remove maximum capped version of all dependencies (relax all ~= specifiers to >=). This gives more freedom to downstream and upstream packagers. Document each minimal version choice.
• Add new --command parameter to gha-utils test-plan command as an alias to --binary.
• Allow gha-utils test-plan to accept a full command line with parameters as input for --command/--binary option.
• Self-check of gha-utils test-plan command in its own test plan.
• Dynamiccaly deepen shallow clones of Git repositories when fetching new commit ranges.
• Only runs optimize-images job if there are image files in the repository.
• Move runner architecture validation to gha-utils-only job.
• Remove dependency on mdformat_tables plugin which has been merged into mdformat-gfm.
• Use un-released versions of mdformat plugins until their compatibility is restored.
• Move all typing-related imports behind a hard-coded TYPE_CHECKING guard to avoid runtime imports.
• Fix builds on macos-26.
• Skip tests on intermediate Python versions (3.12 and 3.13) to reduce CI load.

4.22.0 (2025-10-12)

• Add new image_files field to gha-utils metadata.
• Only runs lint-yaml job if there are YAML files in the repository.
• Only runs lint-github-action job if there are workflow files in the repository.
• Only runs broken-links job if there are Markdown or rST files in the repository.
• Only runs update-mailmap job if .mailmap file exists.
• The gha-utils test-plan command now reports the detailed line differences when a *_regex_fullmatch check fails.
• Fix commit_range field when there is only one commit in the range.
• Flag macos-26 as unstable target by default for Nuitka builds while we wait for a solution upstream.
• Upload Nuitka crash report as artifacts when the build fails.
• Validate architecture of binaries produced by Nuitka builds.

4.21.0 (2025-10-11)

• Use astral-sh/setup-uv action to install uv instead of manually installing it with pip.
• Remove requirements/uv.txt file.
• Add new fields to gha-utils metadata:
  • yaml_files
  • workflow_files
  • mailmap_exists
• Check that start and end commit of commit_range exist in the repository before trying to traverse commits with PyDriller.
• Add check-runners job to always verify the architecture of each runner used to compile binaries with Nuitka.
• Use macos-28 runner instead of macos-15 to build binaries for arm64.
• Use macos-15-intel runner instead of macos-13 to build binaries for x64.
• Run tests on macos-28 and macos-15-intel runners instead of macos-15 and macos-13.
• Only parse .gitignore file once, when first needed, and cache the matching function.
• Run gha-utils commands without --verbosity DEBUG option in jobs to reduce noise.
• Silence overly verbose debug messages from py-walk logger.
• Run debug workflow on all platforms targeted by Nuitka builds.
• Only runs debug workflow manually, on demand.
• Pin version of awesome-lint to v2.2.2.
• Pin version of actionlint to v1.7.7.

4.20.0 (2025-10-10)

... (truncated)

Commits

• ea3ad02 [changelog] Release v4.23.0
• 659c74a Bump ruff from 0.14.1 to 0.14.2
• 2856f5e [autofix] Regenerate dependency graph
• 618fa9f Dynamiccaly deepen shallow clones of Git repositories when fetching new commi...
• b39ef01 Get new base ref sha instead of name
• 73fb981 Fix mdformat_simple_breaks with mdformat 1.0.0
• 47a697b Fix types
• 7ecf85d Relax requirements
• 2336d24 Add missing parameter
• 2b0f2e9 Update changelog
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)