build(deps): bump github/codeql-action from 3.26.3 to 3.26.4 in the actions group #596

	name: Lint

	on:
	push:
	branches:
	- main
	pull_request:

	jobs:
	lint:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7

	# NOTE: We intentionally lint against our minimum supported Python.
	- uses: actions/setup-python@39cd14951b08e74b54015e9e001cdefcf80e669f
	with:
	python-version: "3.8"
	cache: "pip"
	cache-dependency-path: pyproject.toml

	- name: deps
	run: make dev ID_EXTRA=lint

	- name: lint
	run: make lint

	check-readme:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7

	# NOTE: We intentionally check `--help` rendering against our minimum Python,
	# since it changes slightly between Python versions.
	- uses: actions/setup-python@39cd14951b08e74b54015e9e001cdefcf80e669f
	with:
	python-version: "3.8"
	cache: "pip"
	cache-dependency-path: pyproject.toml

	- name: deps
	run: make dev

	- name: check-readme
	run: make check-readme

	licenses:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
	# adapted from Warehouse's bin/licenses
	- run: \|
	for fn in $(find . -type f -name "*.py"); do
	if [[ ! "$(head -5 $fn \| grep "^ $#\\|\\\|\/\/$ .* License$d*$")" ]]; then
	echo "${fn} is missing a license"
	exit 1
	fi
	done

	all-lints-pass:
	if: always()

	needs:
	- lint
	- check-readme
	- licenses

	runs-on: ubuntu-latest

	steps:
	- name: check lint jobs
	uses: re-actors/alls-green@05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe # v1.2.2
	with:
	jobs: ${{ toJSON(needs) }}

Provide feedback