chore: bump Glyndor/.github/.github/workflows/python-ci.yml from 1.10.1 to 1.14.1 in the actions group

[dependabot]

Bumps the actions group with 1 update: Glyndor/.github/.github/workflows/python-ci.yml.

Updates Glyndor/.github/.github/workflows/python-ci.yml from 1.10.1 to 1.14.1

Release notes

Sourced from Glyndor/.github/.github/workflows/python-ci.yml's releases.

v1.14.1 — empty-diff pull-request guard

Moves the pull-request-only guard inside the empty-diff reusable, so calling it on a non-pull_request event skips instead of failing on a missing base ref.

What changed

• empty-diff is now conditional (PR #114). The inner job carries if: github.event_name == 'pull_request'. Called from a push or schedule workflow it no longer fails closed on an absent base ref — it emits no check at all.
• This repository gained its own thin caller (PRs #112, #113). ci.yml here calls the reusable against itself. No consumer-facing surface; it is why the tag range spans three commits rather than one.

Why

The reusable reads the base ref from github.event.pull_request.base.ref. On any other event that is empty, and the guard I wrote for it exits 1 with "could not determine the pull request base ref". Correct as a fail-closed default, wrong as the experience for someone who wires the reusable into a workflow that also runs on push: they get a red check for the trigger, not for the diff. The four consumers all carry if: github.event_name == 'pull_request' on the calling job, so none of them ever hit it — but that puts the burden on every future caller remembering a line I can just as easily enforce here.

What this does not do

The guard turns a hard failure into a skip. It does not make empty-diff meaningful on push — there is no base ref to diff against there. If you require <job id> / empty diff in a ruleset and call the reusable on push, the skipped job resolves as passing. Require it on pull request only.

Upgrading

Bump the pin; there is no input or check-name change.

uses: Glyndor/.github/.github/workflows/empty-diff.yml@c958978687af37dc2d826a967d9c549589afb39f # v1.14.1

The emitted check name is unchanged: <caller job id> / empty diff. If you already guard the calling job with if: github.event_name == 'pull_request', this bump changes nothing you can observe.

Proven before it was tagged

Pinned at the merge SHA in Glyndor/scoop-bucket (PR #49) before this tag. The pull request run and the push-to-main run were both green, with the job skipped on push — which is the behaviour this release exists to add.

... (truncated)

Commits

• c958978 ci(empty-diff): move the pull-request-only guard inside the reusable (#114)
• 9afcef0 ci: run the empty-diff gate only on pull requests (#113)
• 8d78788 ci: add a thin ci.yml caller for the empty-diff reusable (#112)
• 7eb2c69 feat(ci): add an empty-diff reusable that fails a no-op pull request (#111)
• 3a46ffe ci(release-verify): per-asset signature verification, plus SHA256SUMS gate (#...
• 41a00f6 ci(release-verify): document why the audit step pins bash (#109)
• e61aaf0 ci: verify the shellcheck download instead of trusting the transport (#108)
• d604dd8 fix: read the documented workflow_call blocks without a secrets lookup (#107)
• 045903b feat: per-package coverage floor, and a fuzz corpus that persists (#106)
• 41d31f1 feat: make a stalled cron fail a check, and keep fuzz reproducers (#105)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like Glyndor/.github/.github/workflows/python-ci.yml is updatable in another way, so this is no longer needed.