Merge branch 'main' into zizmor-action

Author: colindean

.github/workflows/dependabot-automerge.yaml

@@ -12,7 +12,7 @@ jobs:
     steps:
       - name: Dependabot metadata
         id: metadata
-        uses: dependabot/fetch-metadata@ffa630c65fa7e0ecfa0625b5ceda64399aea1b36 # v2
+        uses: dependabot/fetch-metadata@25dd0e34f4fe68f24cc83900b1fe3fe149efef98 # v3.1.0
         with:
           github-token: "${{ secrets.GITHUB_TOKEN }}"
       - name: Enable auto-merge for Dependabot PRs

.github/workflows/poetry-checks.yml

@@ -26,4 +26,4 @@ jobs:
         persist-credentials: false
     # This will post a comment on PRs when poetry.lock changes
     - name: Diff poetry.lock
-      uses: target/diff-poetry-lock@1ef13108b924e907ed695ac172503091bd0129d4 # v0.0.3
+      uses: target/diff-poetry-lock@d9fd592c4acfaffd16832da1afca34b9eb0546b9 # v0.2.0