Merge pull request #596 from chirizxc/zizmor-1.15.2

Tishka17 · web-flow · commit 8df01ef45670 · 2025-10-14T18:59:36.000+02:00
bump zizmor
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -4,4 +4,6 @@ updates:
     directory: "/"
     schedule:
       interval: "monthly"
-    target-branch: develop
+    target-branch: develop
+    cooldown:
+      default-days: 4
diff --git a/.github/workflows/setup.yml b/.github/workflows/setup.yml
@@ -62,7 +62,7 @@ jobs:
         sphinx-build -M html docs docs-build -W
 
     - name: Run zizmor
-      run: zizmor .github/workflows
+      run: zizmor .github
 
     - name: Store coverage file
       uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02
diff --git a/docs/contributing.rst b/docs/contributing.rst
@@ -103,7 +103,7 @@ We use ``zizmor`` to audit our GitHub Actions workflows for security issues. To
 
 .. code-block::
 
-    zizmor .github/workflows
+    zizmor .github
 
 Submitting changes
 ============================
diff --git a/requirements_dev.txt b/requirements_dev.txt
@@ -2,4 +2,4 @@ uv==0.9.*
 ruff==0.14.*
 mypy==1.18.*
 nox==2025.05.01
-zizmor~=1.14.2
+zizmor~=1.15.2
