fix: upgrade sinatra to clear GHSA-hxx2-7vcw-mqr3 (#4582) #7514

	name: Checks

	on:
	workflow_dispatch:
	pull_request:
	push:
	branches: [master]

	permissions:
	contents: read
	pull-requests: read

	concurrency:
	group: ${{ github.workflow }}-$${{ github.head_ref \|\| github.run_id }}
	cancel-in-progress: true

	jobs:
	precommit:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	# Install Go since pre-commit below runs "go mod tidy".
	- uses: actions/setup-go@v5
	with:
	go-version-file: "go.mod"
	check-latest: true
	# pre-commit runs "pip install" which doesn't work under Debian's apt-instaled Python.
	# https://packaging.python.org/en/latest/specifications/externally-managed-environments/#externally-managed-environments
	- uses: actions/setup-python@v5
	with:
	python-version: "3.13"
	- uses: pre-commit/[email protected]
	with:
	extra_args: --all-files --hook-stage=manual

	lint:
	name: lint
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	- uses: actions/setup-go@v5
	with:
	go-version-file: "go.mod"
	- uses: golangci/golangci-lint-action@v8
	with:
	version: v2.4.0

Provide feedback