Bump github/codeql-action in the github-action-updates group #250

	name: build

	on:
	push:
	release:
	types: [created, published]

	env:
	python_version: '3.12'

	permissions:
	contents: read

	jobs:

	test:
	runs-on: ubuntu-22.04
	container: fedora:39
	timeout-minutes: 30
	permissions:
	contents: write
	steps:
	- name: Harden Runner
	uses: step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde # v2.9.1
	with:
	egress-policy: audit

	- name: Install Linux Dependencies
	run: >
	dnf install -y gcc git graphviz pkg-config python-launcher upx
	xorg-x11-server-Xvfb gtk4 gobject-introspection-devel
	cairo-gobject-devel gtksourceview5-devel libadwaita-devel cairo-devel
	python${{ env.python_version }}-devel
	- uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
	- name: Set ownership of checkout directory
	run: chown -R $(id -u):$(id -g) $PWD
	- name: Set up Python ${{ env.python_version }}
	uses: actions/setup-python@39cd14951b08e74b54015e9e001cdefcf80e669f # v5.1.1
	with:
	python-version: ${{ env.python_version }}
	- name: Install pipx
	run: \|
	python${{ env.python_version }} -m ensurepip
	python${{ env.python_version }} -m pip install pipx
	echo "/github/home/.local/bin" >> $GITHUB_PATH
	- name: Install Poetry
	run: >
	pipx install --python ${{ env.python_version }}
	--pip-args="--constraint=$GITHUB_WORKSPACE/.github/constraints.txt" poetry
	- name: Install dependencies
	run: poetry install --no-interaction
	- name: Test
	run: xvfb-run poetry run pytest

Provide feedback